CVE-2022-23831 describes an insufficient validation vulnerability in AMD μProf, which could allow an unauthenticated attacker to send an arbitrary buffer via IOCTL input. This flaw can lead to a Windows kernel crash, resulting in a denial of service for affected AMD, FreeBSD, Linux, and Microsoft systems. Rated with a CVSS score of 7.5 (HIGH), the vulnerability is remotely exploitable with low attack complexity, but currently has no known active exploitation, publicly available exploit code, or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 3.6.549CPE matchmatch criteria | cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:* | ||
< 3.6.839CPE matchmatch criteria | cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:* | ||
< 3.6.449CPE matchmatch criteria | cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.