CVE-2023-20561

Summary

Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service.

Affected Software

VendorProductVersion RangeStatus
AMDμProfvarious < 4.1.396affected
AMDμProfvarious < 4.1-424affected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References