CVE-2020-12138 - CVE House
Back to Database
Status published High CVE-2020-12138

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly...

Vulnerability Description

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM privileges via a DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12138

Credits & Attribution

No credits recorded in the NVD database.

References

More from amd

View All →
CVE-2022-29277
Incorrect pointer checks within the the FwBlockServiceSmm driver can allow...
Unknown 0
CVE-2021-44850
On Xilinx Zynq-7000 SoC devices, physical modification of an SD...
Medium 6.8
CVE-2020-8950
The AUEPLauncher service in Radeon AMD User Experience Program Launcher...
High 7.8
CVE-2019-9836
Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform...
Medium 5.3
CVE-2019-7247
An issue was discovered in AODDriver2.sys in AMD OverDrive. The...
Critical 9.8

Affected Vendor

Affected Software

atillk64
Vulnerable Versions:
5.11.9.0

Timeline

Official Publish: April 27th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.