Skip to content
OpenAdvisories
High · 7.5 CVE-2022-27674 EUVD-2022-32171GHSA-jm9q-fgcx-m964

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to …

Published Nov 9, 2022 · Updated May 1, 2025 · Assigned by AMD

Vendor: AMD Product: AMD µProf

Description

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.

Affected products

VendorProductAffectedFixed
AMD AMD μProf AMDuProf_FreeBSD_x64 – < 3.6.549, AMDuProf Windows – < 3.6.839, AMDuProf Linux – < 3.6-449 3.6.549

References