Technical impact
An unchecked return value inside AMD Platform Management Framework permits an attacker to read or write any memory address, potentially compromising confidentiality, integrity, or availability. This flaw falls under CWE‑252 and could be used to trigger remote code execution or arbitrary privilege escalation.
Affected Systems
The vulnerability affects AMD Ryzen 6000, 7035, 7040, 8040 and Embedded 8000 Series processors that contain the Platform Management Framework component.
Risk and Exploitability
The CVSS score of 8.3 indicates high severity, while the EPSS score is unavailable and the flaw is not listed in CISA’s KEV catalog. An attacker would need access to the management interface or elevated privileges to exploit the unchecked return value, but once achieved, the ability to read or modify arbitrary addresses presents a significant escalation opportunity.
