7.3
High
CVE-2023-31348 A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially…
Description
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| μProf Tool 3.4 | earliest → < 3.4.494 | 3.4.494 |
| uprof_tool 3.4 | earliest → < 3.4.494 | 3.4.494 |
Other CVEs of μProf Tool
The 5 CVEs of μProf Tool →
CVE-2023-31366
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially…
3.3
Low
CVE-2023-31349
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege…
7.3
High
CVE-2023-31341
Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated…
7.3
High
CVE-2021-26334
The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may…
Not rated