Technical impact
Improper input validation in the AMD Platform Management Framework (PMF) permits an attacker to instruct PMF to unmap arbitrary memory pages. This behavior can corrupt integrity, cause system instability or denial of service, and enable privilege escalation, potentially compromising confidentiality if the attacker gains higher‑level access.
Affected Systems
All AMD Ryzen processor families listed by AMD as affected, including the 6000, 7035, 7040 Mobile, 8040 Mobile, AI 300, Al Max+, and Embedded 8000 Series processors. No specific processor revisions or firmware versions are enumerated, so users should assume all current builds are potentially vulnerable until the vendor issues a patch.
Risk and Exploitability
The CVSS score of 8.4 indicates a high severity level, and while the EPSS score is not available, the lack of an EPSS figure does not mitigate the seriousness of the flaw. The vulnerability is not listed in the CISA KEV catalog, so no known widespread exploitation has been reported yet. Exploitation would require the attacker to send crafted input to the PMF. The precise attack vector is not disclosed in the description, but the PMF operates at privileged firmware or management‑level, suggesting the threat may manifest locally or via remote management protocols that interact with firmware. The combination of privileged access and memory manipulation makes the risk significant.
