AMD µProf Privilege Escalation Vulnerability Allowing Arbitrary Code Execution

A vulnerability in the AMD µProf performance analysis tool-suite, specifically within the AMDPowerProfiler.sys driver, has been identified. This issue arises from incorrect permission assignments that may enable a local user-privileged attacker to escalate privileges, potentially leading to arbitrary code execution. The vulnerability is caused by the driver's failure to properly validate user access when handling IOCTL requests, which could allow unprivileged users to manipulate files in ways that could be exploited.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a local user to execute arbitrary code with elevated rights.

Remediation

Users are advised to update to AMD µProf version 5.2.431 or higher, released on December 11, 2025.