Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.
Weakness
The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Uprof | Amd | * | 5.0.1174 (excluding) |
| Uprof | Amd | * | 5.0.1223 (excluding) |
| Uprof | Amd | * | 5.0.1479 (excluding) |