CVE-2023-31348 - A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution

Back Back to CVE browser

HIGH

A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution

Published Aug 13, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.18%

Description

A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Affected products

Vendor AMD Product μProf Tool Default
unaffected
Affected
- ≥ μProf Tool, < 3.4.494

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
AMD	μProf Tool	unaffected	Affected ≥ μProf Tool, < 3.4.494

Vendor AMD Product Uprof Tool Default
unknown
Affected
- ≥ 0, < 3.4.494

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
AMD	Uprof Tool	unknown	Affected ≥ 0, < 3.4.494

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-427

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-35659
Advisory
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-35659		Advisory
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner AMD

Published Aug 13, 2024

Updated Aug 14, 2024

Reserved Apr 27, 2023

Link CVE-2023-31348

CISA Vulnrichment

Updated Aug 14, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-31348

Red Hat

No data

ENISA EUVD

Assigner AMD

Published Aug 13, 2024

Updated Aug 14, 2024

Link EUVD-2023-35659

GitHub

No data