EUVD-2025-209864
GHSA-52rq-4m29-jc22
CVSS VectorNVD
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionNVD
An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out-of-Bounds, potentially resulting in privilege escalation.
AnalysisAI
Out-of-bounds write in the AMD Platform Management Framework (PMF) Driver enables local authenticated users to escalate privileges on AMD Ryzen 6000/7000/8000 series processors. The vulnerability stems from improper input validation (CWE-787) allowing memory corruption beyond allocated buffer boundaries. Exploitation requires low-privilege local access with low attack complexity (CVSS 4.0: AV:L/AC:L/PR:L), making this a realistic post-compromise escalation vector. AMD released chipset driver version 7.06.02.123 addressing all affected Ryzen series. No public exploit or active exploitation confirmed at time of analysis.
Technical ContextAI
The AMD Platform Management Framework (PMF) is a kernel-level driver component in AMD chipset software that manages power, thermal, and performance tuning for modern Ryzen processors. This vulnerability manifests as CWE-787 (Out-of-bounds Write), where the driver fails to properly validate input parameters before writing to memory buffers. The affected products span AMD's mobile and embedded Ryzen processor lines from 2022-2024: Ryzen 6000 series (Rembrandt, 2022), Ryzen 7035 (Rembrandt R), Ryzen 7040 (Phoenix, 2023), Ryzen 8040 (Hawk Point, 2024), and Ryzen Embedded 8000 series. CPE entries confirm this is a driver vulnerability affecting the software layer rather than processor silicon, requiring both chipset driver installation and Windows/Linux systems running the PMF driver component. The out-of-bounds write condition allows attackers to corrupt adjacent kernel memory structures, leading to arbitrary code execution in kernel context.
RemediationAI
Update AMD chipset drivers to version 7.06.02.123 or later, available from AMD's official download portal or system manufacturer support sites. For AMD Ryzen Embedded 8000 Series, also update graphics driver to version 25.6.1 (branch 25.10.13.01) as specified in AMD Security Bulletin AMD-SB-4015. Organizations should prioritize patching systems where users have local access but should not have administrative privileges (shared workstations, kiosks, multi-user environments). As an interim compensating control where patching is delayed, restrict local access to trusted administrators only and implement application whitelisting to prevent unauthorized driver interactions, though this significantly limits system usability. Monitor for unusual driver loading activity or unexpected privilege escalation attempts via Windows Event ID 4672 (special privileges assigned) or Linux auditd kernel module events. Disable the AMD PMF service if power management features are non-critical, though this will degrade battery life and thermal performance on mobile systems. Full advisory and download links: https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html
More from same product – last 7 days
VM escape in Kata Containers allows any Kubernetes user with pod-creation rights to break out of the VM sandbox and gain
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix watch_id bounds checking in debug a
In the Linux kernel, the following vulnerability has been resolved: ceph: only d_add() negative dentries when they are
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared r
Share
External POC / Exploit Code
Leaving vuln.today