Vulnerability Details CVE-2022-27674
Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.9%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2022-27674
-
cpe:2.3:a:amd:amd_uprof:3.4.494
-
cpe:2.3:a:amd:amd_uprof:3.4.502
-
cpe:2.3:o:freebsd:freebsd:-
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:microsoft:windows:-