EUVD-2025-209869
GHSA-7vj2-xcgm-4r5f
CVSS VectorNVD
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionNVD
Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity and availability, or allowing privilege escalation resulting in loss of confidentiality.
AnalysisAI
Local privilege escalation in AMD Platform Management Framework (PMF) allows authenticated attackers with low privileges to unmap arbitrary memory pages, potentially executing code with elevated privileges or triggering system crashes. Affects modern AMD Ryzen mobile processors across multiple generations (6000/7000/8000/AI 300 series, embedded variants). The vulnerability enables both horizontal escalation (confidentiality compromise via changed scope in CVSS 4.0) and vertical impact (integrity/availability degradation). No evidence of active exploitation (not in CISA KEV), but the local attack vector with low complexity makes this exploitable by malware or malicious insiders once system access is obtained. EPSS data not available for risk calibration.
Technical ContextAI
AMD Platform Management Framework (PMF) is a system-level software component managing power, thermal, and performance optimization on AMD Ryzen mobile processors. The vulnerability stems from CWE-20 (Improper Input Validation) where PMF fails to adequately validate input parameters before performing memory management operations. This allows manipulation of memory unmapping operations to target arbitrary physical or virtual memory pages. Affected products span seven processor families identified by CPE strings: Rembrandt (Ryzen 6000/7035), Phoenix (Ryzen 7040), Hawk Point (Ryzen 8040), Strix Point (Ryzen AI 300), Ryzen AI Max+, and Embedded 8000 series. All are mobile or embedded x86-64 platforms with integrated Radeon graphics. The framework operates with elevated privileges to manage hardware resources, making input validation failures particularly critical as they bridge userspace to kernel/firmware boundary.
RemediationAI
Apply AMD-provided firmware and driver updates per Security Bulletin AMD-SB-4015 available at https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html. The bulletin should contain PMF software updates for each affected processor family-check for BIOS/UEFI firmware updates from OEM system vendors (Dell, HP, Lenovo, etc.) as PMF components are often integrated into platform firmware. Update priority: systems with untrusted local users, shared workstations, or running unvetted software. For systems awaiting patches: enforce principle of least privilege rigorously-restrict local user accounts to standard permissions, disable unnecessary local admin rights, deploy application whitelisting to prevent unauthorized code execution that could leverage this vulnerability. Monitor for abnormal memory access patterns or unexpected privilege escalation via EDR telemetry. Note that restricting physical access alone is insufficient since malware with initial foothold can exploit this. Compensating controls reduce but do not eliminate risk-patching remains the only complete mitigation. Verify patch deployment via AMD driver version checks or OEM-specific firmware validation tools.
More from same product – last 7 days
VM escape in Kata Containers allows any Kubernetes user with pod-creation rights to break out of the VM sandbox and gain
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix watch_id bounds checking in debug a
In the Linux kernel, the following vulnerability has been resolved: ceph: only d_add() negative dentries when they are
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared r
Share
External POC / Exploit Code
Leaving vuln.today