high7.5

CVE-2020-12965

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially…

Impact

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.

Affected products

Vendor	Product	Affected versions
Amd	Ryzen Pro 5650g Firmware	All versions
Amd	Ryzen Pro 5650ge Firmware	All versions
Amd	Ryzen Pro 5750g Firmware	All versions
Amd	Ryzen Pro 5750ge Firmware	All versions
Amd	Ryzen Pro 5350g Firmware	All versions
Amd	Ryzen Pro 5350ge Firmware	All versions
Amd	Ryzen Pro 4750g Firmware	All versions
Amd	Ryzen Pro 4750ge Firmware	All versions
Amd	Ryzen Pro 4650g Firmware	All versions
Amd	Ryzen Pro 4650ge Firmware	All versions
Amd	Ryzen Pro 4350g Firmware	All versions
Amd	Ryzen Pro 4350ge Firmware	All versions

Weakness classification

CWE-74

References

NVD record
CVE.org record
http://www.openwall.com/lists/oss-security/2023/12/05/3
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010
http://www.openwall.com/lists/oss-security/2023/12/05/3
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010