Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2023-15020 CVE-2023-31366 · GHSA-g6wf-h667-5899

Improper input validation in AMD μProf Tool

Priority LOW 24

Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0015 Published 2024-08-13 Fixed in 3.4.494 CWE-20
Priority LOW 35

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2024-08-13 Fixed in 3.4.494 CWE-276
Priority LOW 35

A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00182 Published 2024-08-13 Fixed in 3.4.494 CWE-400
TI-2023-15002 CVE-2023-31341 · GHSA-c87h-375h-xrrv

Improper access control in AMD μProf Tool

Priority LOW 33

Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of s…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00134 Published 2024-08-13 Fixed in 3.4.494 CWE-284