CVE-2020-6102
Last modified
CVE-2020-6102 is a critical-severity vulnerability rated 9.9/10 on the CVSS scale. An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. EPSS estimates a 2.78% chance of exploitation in the next 30 days.
Description
An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered from a HYPER-V guest using the RemoteFX feature, leading to executing the vulnerable code on the HYPER-V host (inside of the rdvgm.exe process). Theoretically this vulnerability could be also triggered from web browser (using webGL and webassembly).
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Amd | Radeon Directx 11 Driver Atidxx64.Dll | 26.20.15019.19000 |
References
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1042Exploit, Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1042Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-6102?
How severe is CVE-2020-6102?
How do I fix CVE-2020-6102?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-6096An exploitable signed comparison vulnerability exists in the…8.1
- CVE-2020-6097An exploitable denial of service vulnerability exists in the…7.5
- CVE-2020-6098An exploitable denial of service vulnerability exists in the…7.5
- CVE-2020-6099An exploitable code execution vulnerability exists in the fi…7.8
- CVE-2020-6100An exploitable memory corruption vulnerability exists in AMD…9.9
- CVE-2020-6101An exploitable code execution vulnerability exists in the Sh…9.9
- CVE-2020-6103An exploitable code execution vulnerability exists in the Sh…9.9
- CVE-2020-6104An exploitable information disclosure vulnerability exists i…5.5
- CVE-2020-6105An exploitable code execution vulnerability exists in the mu…7.8
- CVE-2020-6106An exploitable information disclosure vulnerability exists i…5.5
- CVE-2020-6107An exploitable information disclosure vulnerability exists i…5.5
- CVE-2020-6108An exploitable code execution vulnerability exists in the fs…7.8
Are you affected by CVE-2020-6102?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
