CVE-2023-31366 - Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service

Back Back to CVE browser

MEDIUM

Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service

Published Aug 13, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.15%

Description

Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service.

Affected products

Vendor AMD Product μProf Tool Default
unaffected
- Version
  μProf Tool
  Status
  affected
  Constraints
  <3.4.494

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

AMD

μProf Tool

unaffected

Version	Status	Constraints
μProf Tool	affected	<3.4.494

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (1)

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner AMD

Published Aug 13, 2024

Updated Aug 14, 2024

Reserved Apr 27, 2023

Link CVE-2023-31366

CISA Vulnrichment

Updated Aug 14, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-31366

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-31366