high7.8
CVE-2020-12891
AMD Radeon Software may be vulnerable to DLL Hijacking through path variable.
Impact
AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Radeon Pro Software | before 21.q2 |
| Amd | Radeon Software | before 21.4.1 |