Prof Tool (Amd) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-08-13. Vendor: Amd.

CVEs of Prof Tool

• CVE-2023-31348 - CVSS 7.8 (high), 2024-08-13: A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
• CVE-2023-31341 - CVSS 7.3 (high), 2024-08-13: Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write,…
• CVE-2023-31366 - CVSS 5.5 (medium), 2024-08-13: Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service.
• CVE-2023-31349 - CVSS 7.8 (high), 2024-08-13: Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in…
• CVE-2021-26334 - CVSS 9.9 (critical), 2021-12-01: The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0…