A DLL hijacking flaw in the AMD Software Installer could allow a local attacker to escalate privileges and execute arbitrary code on affected systems.

This vulnerability involves an uncontrolled search path element (CWE-427) within the AMD Software Installer, which allows an attacker with low-level local access to hijack DLL loading processes. By placing a malicious library in the search path, an attacker can achieve arbitrary code execution with elevated privileges.

Successful exploitation of this vulnerability permits a local attacker to gain full control over the affected system, potentially leading to unauthorized data access, persistence, and lateral movement within the network. Although the CVSS score of 7.8 indicates a High severity, the requirement for local access and specific conditions limits the immediate threat to remote actors. However, once a foothold is established, the ability to execute code at a higher privilege level represents a significant security breach.

Immediate Action: Update the AMD Software Installer to the patched version, amd-software-adrenalin-edition-25.5.1-minimalsetup-250513_web.exe, as specified in the official AMD security bulletin.

Proactive Monitoring: Monitor system logs for unauthorized software installation attempts or the creation of unexpected DLL files in directories utilized by the AMD installer.

Compensating Controls: Restrict local user permissions to prevent unauthorized file placement in application directories and ensure that endpoint security software is configured to detect and block suspicious library loading behaviors.

Public Exploit Available: Unknown.

Given the potential for privilege escalation, administrators should prioritize updating the AMD Software Installer across all managed endpoints. Applying the provided patch is the only definitive way to eliminate the uncontrolled search path vulnerability and ensure system integrity.