VYPR
← All advisories
Medium severity6.6NVD Advisory· Published May 13, 2025· Updated Jun 17, 2026

CVE-2024-36340

CVE-2024-36340

Description

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure.

Affected products

5
  • AMD/uprofllm-fuzzy4 versions
    (expand)+ 3 more
    • (no CPE)
    • cpe:2.3:a:amd:uprof:*:*:*:*:*:windows:*:*range: <5.0.1174
    • cpe:2.3:a:amd:uprof:*:*:*:*:*:freebsd:*:*range: <5.0.1223
    • cpe:2.3:a:amd:uprof:*:*:*:*:*:linux:*:*range: <5.0.1479
  • AMD/µProfcpe-rescue
    Range: 5.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.