CVE-2020-12890

Summary (based on provided docs): CVE-2020-12890 concerns AMD’s System Management Mode (SMM). The root cause is a lack of validation in the SMI handler when calling SmmGetVariable, allowing an attacker with physical or administrative access to manipulate the AGESA code in UEFI firmware and gain a...