CVE-2022-27674: AMD Uprof

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.

Affected products

• AMD AMD Uprof: before 3.6.549 (fixed in 3.6.549); before 3.6.839 (fixed in 3.6.839); before 3.6.449 (fixed in 3.6.449)

Published 2022-11-09. Last modified 2026-06-17.