CVE-2024-36340

Published: May 13, 2025Modified: Jun 17, 2026

6.6

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Exploitability: 1.3 / Impact: 5.2

Source: psirt@amd.com (Secondary)

Description

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure.

Affected (3)

Products: Amd: Uprof

Amd

1 product

Uprof

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Amd Uprof	Before 5.0.1223
Amd Uprof	Before 5.0.1479
Amd Uprof	Before 5.0.1174

Related CWEs

CWE-1386

Insecure Operation on Windows Junction / Mount Point

The product opens a file or directory, but it does not properly prevent the name from being associated with a junction or mount point to a destination that is outside of the intended control sphere.

References (1)

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9013.html

Source: psirt@amd.com

MitigationPatchVendor Advisory

Timeline

No history available yet.