CVE Feed

    Dashboard / CVE / CVE-2020-12965

    CVE-2020-12965

    When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.

    Published:Feb 4, 2022
    Last Modified:Nov 21, 2024
    EPS:Feb 4, 2022
    EPSS Score:0.00813
    CVSS Score:7.5

    Affected Products

    Vendor
    Amd
    Product
    Athlon 3050ge
    Vendor
    Amd
    Product
    Athlon 3050ge Firmware
    Vendor
    Amd
    Product
    Athlon 3150g
    Vendor
    Amd
    Product
    Athlon 3150g Firmware
    Vendor
    Amd
    Product
    Athlon 3150ge
    Vendor
    Amd
    Product
    Athlon 3150ge Firmware
    Vendor
    Amd
    Product
    Athlon Gold Pro 3150g
    Vendor
    Amd
    Product
    Athlon Gold Pro 3150g Firmware
    Vendor
    Amd
    Product
    Athlon Gold Pro 3150ge
    Vendor
    Amd
    Product
    Athlon Gold Pro 3150ge Firmware
    Vendor
    Amd
    Product
    Athlon Pro 200ge
    Vendor
    Amd
    Product
    Athlon Pro 200ge Firmware
    Vendor
    Amd
    Product
    Athlon Pro 300ge
    Vendor
    Amd
    Product
    Athlon Pro 300ge Firmware
    Vendor
    Amd
    Product
    Athlon Silver Pro 3125ge
    Vendor
    Amd
    Product
    Athlon Silver Pro 3125ge Firmware
    Vendor
    Amd
    Product
    Ryzen 4300g
    Vendor
    Amd
    Product
    Ryzen 4300g Firmware
    Vendor
    Amd
    Product
    Ryzen 4300ge
    Vendor
    Amd
    Product
    Ryzen 4300ge Firmware
    Vendor
    Amd
    Product
    Ryzen 4600g
    Vendor
    Amd
    Product
    Ryzen 4600g Firmware
    Vendor
    Amd
    Product
    Ryzen 4600ge
    Vendor
    Amd
    Product
    Ryzen 4600ge Firmware
    Vendor
    Amd
    Product
    Ryzen 4700g
    Vendor
    Amd
    Product
    Ryzen 4700g Firmware
    Vendor
    Amd
    Product
    Ryzen 4700ge
    Vendor
    Amd
    Product
    Ryzen 4700ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5300g
    Vendor
    Amd
    Product
    Ryzen 5300g Firmware
    Vendor
    Amd
    Product
    Ryzen 5300ge
    Vendor
    Amd
    Product
    Ryzen 5300ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5600g
    Vendor
    Amd
    Product
    Ryzen 5600g Firmware
    Vendor
    Amd
    Product
    Ryzen 5600ge
    Vendor
    Amd
    Product
    Ryzen 5600ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5600x
    Vendor
    Amd
    Product
    Ryzen 5600x Firmware
    Vendor
    Amd
    Product
    Ryzen 5700g
    Vendor
    Amd
    Product
    Ryzen 5700g Firmware
    Vendor
    Amd
    Product
    Ryzen 5700ge
    Vendor
    Amd
    Product
    Ryzen 5700ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5800x
    Vendor
    Amd
    Product
    Ryzen 5800x3d
    Vendor
    Amd
    Product
    Ryzen 5800x3d Firmware
    Vendor
    Amd
    Product
    Ryzen 5800x Firmware
    Vendor
    Amd
    Product
    Ryzen 5900x
    Vendor
    Amd
    Product
    Ryzen 5900x Firmware
    Vendor
    Amd
    Product
    Ryzen 5950x
    Vendor
    Amd
    Product
    Ryzen 5950x Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 2200g
    Vendor
    Amd
    Product
    Ryzen Pro 2200g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 2200ge
    Vendor
    Amd
    Product
    Ryzen Pro 2200ge Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 2400g
    Vendor
    Amd
    Product
    Ryzen Pro 2400g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 2400ge
    Vendor
    Amd
    Product
    Ryzen Pro 2400ge Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 3200g
    Vendor
    Amd
    Product
    Ryzen Pro 3200g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 3200ge
    Vendor
    Amd
    Product
    Ryzen Pro 3200ge Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 3350g
    Vendor
    Amd
    Product
    Ryzen Pro 3350g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 3400g
    Vendor
    Amd
    Product
    Ryzen Pro 3400g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 3400ge
    Vendor
    Amd
    Product
    Ryzen Pro 3400ge Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 3600
    Vendor
    Amd
    Product
    Ryzen Pro 3600 Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 3700
    Vendor
    Amd
    Product
    Ryzen Pro 3700 Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 3900
    Vendor
    Amd
    Product
    Ryzen Pro 3900 Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 4350g
    Vendor
    Amd
    Product
    Ryzen Pro 4350g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 4350ge
    Vendor
    Amd
    Product
    Ryzen Pro 4350ge Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 4650g
    Vendor
    Amd
    Product
    Ryzen Pro 4650g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 4650ge
    Vendor
    Amd
    Product
    Ryzen Pro 4650ge Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 4750g
    Vendor
    Amd
    Product
    Ryzen Pro 4750g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 4750ge
    Vendor
    Amd
    Product
    Ryzen Pro 4750ge Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 5350g
    Vendor
    Amd
    Product
    Ryzen Pro 5350g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 5350ge
    Vendor
    Amd
    Product
    Ryzen Pro 5350ge Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 5650g
    Vendor
    Amd
    Product
    Ryzen Pro 5650g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 5650ge
    Vendor
    Amd
    Product
    Ryzen Pro 5650ge Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 5750g
    Vendor
    Amd
    Product
    Ryzen Pro 5750g Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 5750ge
    Vendor
    Amd
    Product
    Ryzen Pro 5750ge Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 1900x
    Vendor
    Amd
    Product
    Ryzen Threadripper 1900x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 1920x
    Vendor
    Amd
    Product
    Ryzen Threadripper 1920x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 1950x
    Vendor
    Amd
    Product
    Ryzen Threadripper 1950x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 2920x
    Vendor
    Amd
    Product
    Ryzen Threadripper 2920x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 2950x
    Vendor
    Amd
    Product
    Ryzen Threadripper 2950x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 2970wx
    Vendor
    Amd
    Product
    Ryzen Threadripper 2970wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 2990wx
    Vendor
    Amd
    Product
    Ryzen Threadripper 2990wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 3960x
    Vendor
    Amd
    Product
    Ryzen Threadripper 3960x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 3970x
    Vendor
    Amd
    Product
    Ryzen Threadripper 3970x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 3990x
    Vendor
    Amd
    Product
    Ryzen Threadripper 3990x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3945wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3945wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3955wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3955wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3975wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3975wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3995wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3995wx Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-10 Buffer Overflow via Environment Variables
    CAPEC-101 Server Side Include (SSI) Injection
    CAPEC-105 HTTP Request Splitting
    CAPEC-108 Command Line Execution through SQL Injection
    CAPEC-120 Double Encoding
    CAPEC-13 Subverting Environment Variable Values
    CAPEC-135 Format String Injection
    CAPEC-14 Client-side Injection-induced Buffer Overflow
    CAPEC-24 Filter Failure through Buffer Overflow
    CAPEC-250 XML Injection
    CAPEC-267 Leverage Alternate Encoding
    CAPEC-273 HTTP Response Smuggling
    CAPEC-28 Fuzzing
    CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
    CAPEC-34 HTTP Response Splitting
    CAPEC-42 MIME Conversion
    CAPEC-43 Exploiting Multiple Input Interpretation Layers
    CAPEC-45 Buffer Overflow via Symbolic Links
    CAPEC-46 Overflow Variables and Tags
    CAPEC-47 Buffer Overflow via Parameter Expansion
    CAPEC-51 Poison Web Service Registry
    CAPEC-52 Embedding NULL Bytes
    CAPEC-53 Postfix, Null Terminate, and Backslash
    CAPEC-6 Argument Injection
    CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
    CAPEC-67 String Format Overflow in syslog()
    CAPEC-7 Blind SQL Injection
    CAPEC-71 Using Unicode Encoding to Bypass Validation Logic
    CAPEC-72 URL Encoding
    CAPEC-76 Manipulating Web Input to File System Calls
    CAPEC-78 Using Escaped Slashes in Alternate Encoding
    CAPEC-79 Using Slashes in Alternate Encoding
    CAPEC-8 Buffer Overflow in an API Call
    CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic
    CAPEC-83 XPath Injection
    CAPEC-84 XQuery Injection
    CAPEC-9 Buffer Overflow in Local Command-Line Utilities

    Related CVEs

    CVE-2021-26316 (CVSS 7.8) — Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to ta…
    CVE-2021-46778 (CVSS 5.6) — Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectur…
    CVE-2021-26317 (CVSS 7.8) — Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resul…
    CVE-2021-26361 (CVSS 5.5) — A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to …
    CVE-2021-26362 (CVSS 7.1) — A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which resul…
    CVE-2021-26366 (CVSS 7.1) — An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot R…
    CVE-2021-26369 (CVSS 7.8) — A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootl…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High