Similar vulnerabilities have been reported in other AMD products, such as the AMD Integrated Management Technology (AIM-T) Manageability Service (CVE-2023-31361) and AMD μProf (CVE-2023-31348), highlighting the importance of secure library loading practices across software ecosystems. Cyber Security News is a Dedicated News Platform For Cyber News, Cyber Attack News, Hacking News & Vulnerability Analysis. AMD has acknowledged the vulnerability and recommends users update their Ryzen Master Utility software to version 2.14.0.3205 or higher. The updated version includes necessary security patches that address the DLL hijacking issue by implementing stricter validation for dynamically loaded libraries. The AMD Ryzen™ Master Utility provides users with a user-friendly interface for overclocking processors, monitoring system performance, and adjusting system settings. AMD has credited security researchers from Pwni for identifying and responsibly disclosing this vulnerability under a coordinated disclosure process. Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. An attacker could place a malicious DLL in a directory that the Ryzen Master Utility accesses, tricking the application into loading it. With a CVSS score of 7.3, this vulnerability is considered to pose a serious security risk. This flaw creates an avenue for attackers to exploit the software by injecting malicious code into the system. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications. Once loaded, this DLL could execute arbitrary code with elevated privileges, potentially compromising system integrity and confidentiality.
This Cyber News was published on cybersecuritynews.com. Publication date: Fri, 14 Feb 2025 07:55:20 +0000