Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown

CVE-2023-31366

Disclosure Date: August 13, 2024 (last updated December 21, 2024)
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service.
Attacker Value
Unknown

CVE-2023-31349

Disclosure Date: August 13, 2024 (last updated December 21, 2024)
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Attacker Value
Unknown

CVE-2023-31348

Disclosure Date: August 13, 2024 (last updated December 21, 2024)
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Attacker Value
Unknown

CVE-2023-31341

Disclosure Date: August 13, 2024 (last updated December 18, 2024)
Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD ?Prof may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service.
Attacker Value
Unknown

CVE-2023-20562

Disclosure Date: August 08, 2023 (last updated October 08, 2023)
Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution.
Attacker Value
Unknown

CVE-2023-20561

Disclosure Date: August 08, 2023 (last updated November 08, 2023)
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service.
Attacker Value
Unknown

CVE-2023-20556

Disclosure Date: August 08, 2023 (last updated November 08, 2023)
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service.
Attacker Value
Unknown

CVE-2022-23831

Disclosure Date: November 08, 2022 (last updated November 08, 2023)
Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.
Attacker Value
Unknown

CVE-2022-27674

Disclosure Date: November 08, 2022 (last updated November 08, 2023)
Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.
Attacker Value
Unknown

CVE-2021-26334

Disclosure Date: November 09, 2021 (last updated February 23, 2025)
The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.