Improper validation in the Power Management Firmware (PMFW) allows a privileged attacker to pass malformed workload arguments when exporting table data from the System Management Unit to main memory. The flaw can lead to exposure of sensitive data or a disruption of normal operation, thereby compromising confidentiality and availability of the affected system. The weakness is identified as CWE‑129, which represents an integer or counter that is written to a bounded data structure and then read in a way that can lead to buffer overread or data leakage.

The vulnerability affects AMD Radeon PRO V520, Radeon PRO V620, Radeon PRO W6000 Series Graphics Products, and Radeon RX 6000 Series Graphics Products. Specific firmware revisions are not enumerated in the advisory, so all current models that run the legacy PMFW are potentially impacted.

The CVSS score of 6.8 indicates a moderate severity. EPSS information is not available, and the flaw is not listed in the CISA KEV catalog, suggesting it has not yet been observed in the wild. The described attack requires elevated privileges to perform the malformed export, so the likely attack vector is an internal or local attacker with privileged access. If the vulnerability is exploited, an attacker could exfiltrate data or cause a crash or lock‑up of the graphics subsystem, degrading system functionality.