CVE-2025-29933
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Improper input validation in AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service.
Risk Assessment
A local attacker can cause system instability or disrupt services, potentially impacting IT environment availability.
Recommendation
Update AMD uProf to the latest patched version and restrict local access to systems where it is used.
Other vulnerabilities in AMD uProf
See all- CVE-2026-28237Medium
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.
- CVE-2026-0466Medium
Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service.
Original NVD description (English source)
Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

