CVE-2024-36340

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure.

Score

CVSS 3.1 6.6 Medium

Status

Analyzed - psirt@amd.com

Published

2025-05-13

Last modified

2025-05-13

Weaknesses

CWE-1386

Affected products

• Amd Prof (Amd)
• Uprof (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9013.html