CVE-2020-12965
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 2.35% probability · 84th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-74
- Affected
- amd/ryzen pro 5650g firmware · amd/ryzen pro 5650ge firmware · amd/ryzen pro 5750g firmware · amd/ryzen pro 5750ge firmware · amd/ryzen pro 5350g firmware · amd/ryzen pro 5350ge firmware · amd/ryzen pro 4750g firmware · amd/ryzen pro 4750ge firmware · amd/ryzen pro 4650g firmware · amd/ryzen pro 4650ge firmware · amd/ryzen pro 4350g firmware · amd/ryzen pro 4350ge firmware · amd/ryzen pro 3900 firmware · amd/ryzen pro 3700 firmware · amd/ryzen pro 3600 firmware · amd/ryzen pro 3400g firmware · amd/ryzen pro 3400ge firmware · amd/ryzen pro 3350g firmware · amd/ryzen pro 3200g firmware · amd/ryzen pro 3200ge firmware · +40 more
- Source
- psirt@amd.com
EPSS 2.4% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://www.openwall.com/lists/oss-security/2023/12/05/3
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010Mitigation, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2023/12/05/3
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010Mitigation, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.