An improper input validation flaw in the AMD Platform Management Framework driver permits a local attacker to read or write outside of the intended memory bounds. The vulnerability is identified as CWE-787 (Out‑of‑Bounds Access). When leveraged, the flaw can cause the attacker to gain higher privileges than authorized, potentially compromising system integrity and confidentiality.

The issue affects AMD Ryzen series processors that include the Platform Management Framework, specifically the 6000, 7035, 7040 mobile, 8040 mobile, and embedded 8000 series. No specific firmware or driver versions are listed, so all current models using the affected PMF driver are considered vulnerable.

The CVSS score of 8.5 indicates a high severity, and the lack of an EPSS score means there is no current evidence of exploitation frequency. The vulnerability is not recorded in CISA’s KEV, and the attack vector is inferred to be local, requiring physical or local administrative access to trigger the out‑of‑bounds read/write which could lead to privilege escalation.