CVE-2022-23831: Input Validation
Insufficient validation of the IOCTL input buffer in AMD ?Prof may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.
Other sources
Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-23831.
What is the severity level of CVE-2022-23831?
The severity level of CVE-2022-23831 is high with a score of 7.5.
Which software is affected by CVE-2022-23831?
The affected software is AMD ?Prof version up to 3.6.549.
What can an attacker do with this vulnerability?
An attacker can send an arbitrary buffer, potentially leading to a Windows kernel crash and denial of service.
How can I fix CVE-2022-23831?
There is currently no known fix or patch available for CVE-2022-23831. It is recommended to follow the guidance provided by the software vendor.