CVE-2019-7246 Privilege escalation in n/a
A vulnerable driver in the AMD Overclocking Utility allows arbitrary MSR writes, enabling attackers to execute code in Ring-0 and escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-7246?
CVE-2019-7246 is a medium-severity vulnerability in n/a, published on 18 May 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Which versions are affected by CVE-2019-7246?
It affects 1 product.
Products include Amd Atillk64.
How do I fix CVE-2019-7246?
No fix has been published for CVE-2019-7246 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-7246 being exploited?
There is no known exploitation of CVE-2019-7246 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-h5rh-jw67-x3pc.