An improper input validation defect in AMD's Platform Management Framework driver can be exploited by a local user to read beyond the bounds of an internal buffer. The resulting out‑of‑bounds read may leak sensitive data or cause the driver to terminate, constituting an information disclosure vulnerability under CWE‑125.

The vulnerability affects AMD Ryzen 6000 Series Processors with Radeon Graphics, Ryzen 7035 Series Processors, Ryzen 7040 and 8040 series mobile processors, and AMD Ryzen Embedded 8000 Series processors. Version details are not specified in the advisory.

The CVSS score of 6.9 indicates a moderate severity level. Because the vulnerability requires local access to the driver, the attack vector is local. EPSS information is unavailable, and there is no current listing in the CISA KEV catalog, suggesting limited availability of public exploits. Nonetheless, the driver’s high‑privileged context means that a successful out‑of‑bounds read could expose confidential information or destabilize the system, making it a notable risk for environments where local users have elevated privileges.