CVE-2023-20562

Description

Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution.

NVD

Severity: HIGH
CVE ID: CVE-2023-20562
CVSS Score: 7.8
CVSS Metrics: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Refrence: NVDMITRE

Proof Of Concept

zeze-zeze

Refrence: GitHub

passwa11

Refrence: GitHub