Vulnerabilities > CVE-2023-20561 - Unspecified vulnerability in AMD Uprof 3.4.494/3.4.502

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
amd

Summary

Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD µProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service.

Vulnerable Configurations

Part Description Count
Application
Amd
2
OS
Microsoft
1
OS
Linux
1