CVE-2023-20556
MEDIUMAmd Uprof < 4.1.396 - Denial of Service
Title source: ruleDescription
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service.
Scores
CVSS v3
5.5
EPSS
0.0004
EPSS Percentile
13.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Classification
Status
published
Affected Products (1)
amd/amd_uprof
< 4.1.396
Timeline
Published
Aug 08, 2023
Tracked Since
Feb 18, 2026