High · 7.3 CVE-2023-31349 EUVD-2023-35660GHSA-pwh8-gr2w-8xpq

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially …

Published Aug 13, 2024 · Updated Aug 13, 2024 · Assigned by AMD

Description

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Affected products

Vendor	Product	Affected	Fixed
AMD	μProf Tool	μProf Tool – < 3.4.494	3.4.494

References

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001