Vulnerability Spotlight: Denial of service in AMD ATIKMDAG.SYS driver
Summary: Cisco Talos discovered a denial-of-service vulnerability in the AMD ATIKMDAG.SYS driver, version 26.20.15029.27017, where a specially crafted D3DKMTCreateAllocation or D3DKMTEscape request causes an out-of-bounds read in Windows kernel memory. The flaw, tracked as TALOS-2020-1102 and CVE-2020-12933, can be triggered from a guest account, and Talos worked with AMD to disclose it and make an update available.
Bottom line: The trigger is a guest account, so anyone with limited access to a machine can reach kernel memory through a graphics driver request, and Snort rules 54465 and 54466 are the only detection named here.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Mentions
- CVE-2020-12933
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026