Skip to content
OpenAdvisories
High · 7.5 CVE-2022-23831 EUVD-2022-28760GHSA-fqxf-7mq3-hv59

Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Win…

Published Nov 9, 2022 · Updated May 1, 2025 · Assigned by AMD

Vendor: AMD Product: AMD µProf

Description

Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.

Affected products

VendorProductAffectedFixed
AMD AMD μProf AMDuProf_FreeBSD_x64 – < 3.6.549, AMDuProf Windows – < 3.6.839, AMDuProf Linux – < 3.6-449 3.6.549

References