AMD uProf allows unrestricted allocation of system resources. An attacker that can trigger this allocation can drain available memory or CPU, leading to a loss of availability of the affected system. The flaw is a classic uncontrolled resource consumption weakness as reflected by CWE‑770.

The vulnerability affects AMD uProf, with no specific version information disclosed. The impact applies to all installations of this profiling tool where the resource allocation limits are not enforced.

The CVSS score of 6.8 indicates a moderate severity. EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector requires the ability to invoke AMD uProf or trigger its resource allocation routines, implying either local privilege or a compromised privileged process. No public exploit is known, but the risk is that an attacker with sufficient access could exhaust resources and cause a denial of service.