AMD Denies Bug Bounty After Fixing Critical Auto-Updater Vulnerability
AMD has reportedly denied a security researcher a $10,000 bug bounty following the resolution of a critical vulnerability in its auto-updater system. The fix for the security flaw took 124 days, equivalent to over four months, to implement after the issue was reported. Despite the company addressing the critical bug, the researcher who identified it did not receive payment for their efforts.
AMD has reportedly declined to award a security researcher a $10,000 bug bounty, even after successfully patching a critical vulnerability discovered in its auto-updater.
The fix for this significant security flaw took AMD a considerable amount of time to deploy, with the process reportedly lasting 124 days. This extended period amounts to over four months from the initial report of the vulnerability to its eventual resolution.
Despite AMD's action to correct the critical security bug, the security researcher responsible for identifying and disclosing the flaw was not compensated for their work. (Source: Tom's Hardware)
Advertisement
AdSense slot • inline
