Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-27674

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denia

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD μProf

  • AMDuProf_FreeBSD_x64 to < 3.6.549affected
  • AMDuProf Windows to < 3.6.839affected
  • AMDuProf Linux to < 3.6-449affected

References