CVE-2022-27674 — AMD / AMD μProf

Description (CNA)

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.

Affected (CNA)

Vendor / product	Versions
AMD / AMD μProf	affected AMDuProf_FreeBSD_x64 before 3.6.549; affected AMDuProf Windows before 3.6.839; affected AMDuProf Linux before 3.6-449

CWE

No CWE identifiers supplied.

References

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1046

ADP enrichment

CVE

No English description supplied.

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1046

CISA-ADP

No English description supplied.

No references supplied.