CVE-2020-8950

The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMDATA%\AMD\PPC\temp that points to an arbitrary folder with an arbitrary file name.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.99% chance of exploitation in the next 30 days, 60th percentile

Published

2020-02-12

Updated

2024-08-04

Proof-of-concept exploits (3)

• https://heynowyouseeme.blogspot.com/2020/02/another-privilege-escalation-filewrite.html
• https://heynowyouseeme.blogspot.com/2020/02/privilege-escalation-filewrite-eop-in.html
• sailay1996/amd_eop_poc27★ · 2020-04-23

References

• CVE Record
• NVD entry

Related

• CVE-2020-1337
• CVE-2021-1675
• CVE-2022-21882
• CVE-2025-53772
• CVE-2020-8949
• CVE-2020-8956