CVE-2023-31349: AMD Uprof

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Affected products

• AMD Uprof: before 4.1.424 (fixed in 4.1.424); before 4.2.816 (fixed in 4.2.816); before 4.2.845 (fixed in 4.2.845)

Published 2024-08-13. Last modified 2026-06-17.