7.3
High
CVE-2023-31341 Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated…
Description
Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| μProf Tool 3.4 | earliest → < 3.4.494 | 3.4.494 |
| amd_uprof 4.2 | earliest → < 4.2 | 4.2 |
Other CVEs of μProf Tool
The 5 CVEs of μProf Tool →
CVE-2023-31366
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially…
3.3
Low
CVE-2023-31349
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege…
7.3
High
CVE-2023-31348
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially…
7.3
High
CVE-2021-26334
The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may…
Not rated