Executive brief
AMD Power Design Manager is a utility for managing power settings on AMD systems. A DLL hijacking vulnerability in the uninstaller could allow a local attacker to run arbitrary code with elevated privileges when the software is being removed, potentially compromising system integrity.
Technical details
A DLL hijacking vulnerability exists in AMD Power Design Manager's uninstallation process. The uninstaller fails to properly validate the source of DLL files before loading them, allowing an attacker with local file system access to place a malicious DLL in a location where the uninstaller will load it. This results in arbitrary code execution with the privileges of the uninstaller process. The vulnerability requires local access and occurs during the uninstall phase, and patches are expected from AMD.
Affected products
- AMD Power Design Manager
Timeline
- 2026-08-11: disclosed