What’s Vulnerable › Vulnerabilities

CVE-2020-12965

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-04 · updated 2026-06-17
• Weakness: CWE-74

Description

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.

Affected products

• AMD Athlon 3050Ge Firmware: all versions
• AMD Athlon 3150G Firmware: all versions
• AMD Athlon 3150Ge Firmware: all versions
• AMD Athlon Gold Pro 3150G Firmware: all versions
• AMD Athlon Gold Pro 3150Ge Firmware: all versions
• AMD Athlon Pro 200Ge Firmware: all versions
• AMD Athlon Pro 300Ge Firmware: all versions
• AMD Athlon Silver Pro 3125Ge Firmware: all versions
• AMD Ryzen 4300G Firmware: all versions
• AMD Ryzen 4300Ge Firmware: all versions
• AMD Ryzen 4600G Firmware: all versions
• AMD Ryzen 4600Ge Firmware: all versions
• AMD Ryzen 4700G Firmware: all versions
• AMD Ryzen 4700Ge Firmware: all versions
• AMD Ryzen 5300G Firmware: all versions
• AMD Ryzen 5300Ge Firmware: all versions
• AMD Ryzen 5600G Firmware: all versions
• AMD Ryzen 5600Ge Firmware: all versions
• AMD Ryzen 5600X Firmware: all versions
• AMD Ryzen 5700G Firmware: all versions
• AMD Ryzen 5700Ge Firmware: all versions
• AMD Ryzen 5800X3D Firmware: all versions
• AMD Ryzen 5800X Firmware: all versions
• AMD Ryzen 5900X Firmware: all versions
• AMD Ryzen 5950X Firmware: all versions
• AMD Ryzen Pro 2200G Firmware: all versions
• AMD Ryzen Pro 2200Ge Firmware: all versions
• AMD Ryzen Pro 2400G Firmware: all versions
• AMD Ryzen Pro 2400Ge Firmware: all versions
• AMD Ryzen Pro 3200G Firmware: all versions

References

• http://www.openwall.com/lists/oss-security/2023/12/05/3
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010
• http://www.openwall.com/lists/oss-security/2023/12/05/3
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010

Get alerted when CVE-2020-12965 or the next vulnerability affects your stack