An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out-of-Bounds, potentially resulting in privilege escalation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| AMD | AMD Ryzen™ 6000 Series Processors With Radeon™ Graphics (Formerly Codenamed "Rembrandt") | Range not provided by sourceCNA affecteddefault affected | |
| AMD | AMD Ryzen™ 7035 Series Processors With Radeon™ Graphics (Formerly Codenamed "Rembrandt R") | Range not provided by sourceCNA affecteddefault affected | |
| AMD | AMD Ryzen™ 7040 Series Mobile Processors With Radeon™ Graphics (Formerly Codenamed "Phoenix") | Range not provided by sourceCNA affecteddefault affected | |
| AMD | AMD Ryzen™ 8040 Series Mobile Processors With Radeon™ Graphics (Formerly Codenamed "Hawk Point") | Range not provided by sourceCNA affecteddefault affected | |
| AMD | AMD Ryzen™ Embedded 8000 Series Processors | Range not provided by sourceCNA affecteddefault affected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.