CVE-2022-27674

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@amd.com

Published

2022-11-09

Last modified

2025-05-01

Weaknesses

CWE-20

Affected products

• Amd Prof (Amd)
• Amd Uprof (Amd)

References

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1046