Input Validation Flaw in AMD uProf Allows Potential Local Attacker Exploitation
CVE-2025-29933

5.5MEDIUM

Key Information:

Vendor

Amd
Status
Amd Μprof
Vendor
CVE Published:
24 November 2025

What is CVE-2025-29933?

A flaw in AMD uProf related to improper input validation enables local attackers to exploit the software by writing out of bounds. This vulnerability poses risks including severe application instability, which may lead to crashes or enable denial of service scenarios. It's crucial for users and organizations utilizing AMD uProf to implement security measures to mitigate potential risks associated with this issue.

Affected Version(s)

AMD μProf uProf 5.1

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Reported through AMD Bug Bounty Program
JSON
.
CVE-2025-29933 : Input Validation Flaw in AMD uProf Allows Potential Local Attacker Exploitation