CVE-2022-23831: AMD Uprof

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.

Affected products

• AMD AMD Uprof: before 3.6.549 (fixed in 3.6.549); before 3.6.839 (fixed in 3.6.839); before 3.6.449 (fixed in 3.6.449)

Published 2022-11-09. Last modified 2026-06-17.