Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture (AGESA) to execute arbitrary code undetected by the operating system.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12890
Reference (s):
- https://www.amd.com/en/corporate/product-security
- URL: https://www.amd.com/en/corporate/product-security