Vulnerability Spotlight: DoS vulnerability in ATIKMDAG.SYS AMD graphics driver
Summary: Cisco Talos discovered a denial-of-service vulnerability in the ATIKMDAG.SYS driver for some AMD graphics cards, where a specially crafted D3DKMTCreateAllocation API request causes an out-of-bounds read and a blue-screen crash. The flaw, tracked as TALOS-2020-1119/CVE-2020-12911 and confirmed in driver version 26.20.15029.27017, can be triggered from a guest account, and AMD does not plan an official patch until Q1 of 2021.
What's compelling: A guest-level account is enough to crash a machine running the affected AMD driver, and the vendor's fix is not expected until the first quarter of 2021 - leaving a window measured in months during which detection rests on Snort rules 36214 and 36215.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Mentions
- CVE-2020-12911
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026