by Kastro
Paper/Archive/CVE-2020-6102

CVE-2020-6102

talos — An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.1…

EPSS 3%CVSS 9.9
critical.is priorityof 100
47
CVSS 9.9 (NVD)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 86.0.860 × 2017.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered from a HYPER-V guest using the RemoteFX feature, leading to executing the vulnerable code on the HYPER-V host (inside of the rdvgm.exe process). Theoretically this vulnerability could be also triggered from web browser (using webGL and webassembly).

Affected

ProductAffectedFixed inSource
AMDAMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000–CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

reftalosintelligence.com/vulnerability_reports/TALOS-2020-1042