Which versions of AMD Platform Management Framework are affected by EUVD-2025-209867?

CVE-2025-0028 affects AMD Ryzen processors (6000, 7000, 8000 series) and allows low-privileged local users to escalate to kernel-level access by exploiting memory handling flaws in the Platform…

How to fix or mitigate EUVD-2025-209867?

Within 24 hours: Inventory all systems running affected AMD Ryzen processor families (6000, 7000, 8000 series) and restrict low-privileged user account creation on critical infrastructure. Within 7 days: Review and tighten local access controls; apply any BIOS/firmware updates referenced in AMD security bulletin AMD-SB-4015 when available. Within 30 days: Coordinate with AMD for patched chipset drivers or firmware releases and deploy to all affected infrastructure; prioritize virtualized environments and systems with privileged user accounts.

AMD Platform Management Framework EUVD-2025-209867

Q: What is the CVSS score of EUVD-2025-209867?

EUVD-2025-209867 has a CVSS 4.0 base score of 8.3 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:H/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2025-0028 HIGH

Unchecked Return Value (CWE-252)

2026-05-15 AMD

GHSA-72v7-rm66-2gr3

Amd Information Disclosure

8.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.3 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:H/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:H/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

May 15, 2026 - 03:30 vuln.today

CVSS changed

May 15, 2026 - 03:22 NVD

8.3 (HIGH)

CVE Published

May 15, 2026 - 01:52 nvd

HIGH 8.3

DescriptionCVE.org

An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confidentiality, integrity, or availability.

AnalysisAI

Local attackers with low-privilege credentials can exploit unchecked return value handling in AMD Platform Management Framework (PMF) to read or write arbitrary memory addresses across multiple AMD Ryzen processor families (6000, 7000, 8000 series). This CWE-252 flaw enables privilege escalation to kernel level, compromising system confidentiality and availability with high impact across both virtualized and physical contexts. AMD has released security bulletin AMD-SB-4015 addressing the vulnerability. No CISA KEV listing or public exploit code has been identified at time of analysis, but the low attack complexity (AC:L) and local privilege requirement (PR:L) suggest exploitation is technically straightforward for attackers with initial system access.

Technical ContextAI

AMD Platform Management Framework (PMF) is a kernel-level driver component managing power, thermal, and performance features across AMD Ryzen mobile and embedded processors. The vulnerability stems from CWE-252 (Unchecked Return Value), where the PMF driver fails to properly validate return values from system calls or API functions before using them in memory operations. This allows an attacker to control addresses used in subsequent read/write operations. Affected CPE strings indicate impact across Rembrandt (Ryzen 6000/7035), Phoenix (Ryzen 7040), Hawk Point (Ryzen 8040), and Ryzen Embedded 8000 processor families. The CVSS 4.0 vector shows both victim system (VC:H/VA:H) and subsequent system (SC:H/SA:H) impact, indicating the flaw can affect virtualized environments where guest compromise leads to hypervisor or adjacent VM impact.

RemediationAI

Apply AMD Platform Management Framework driver updates provided in AMD Security Bulletin AMD-SB-4015 (https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4015.html). Download patched PMF drivers from AMD support portal matching your specific processor family and operating system. For Windows systems, update via Windows Update or AMD Software Adrenalin Edition. For Linux systems, update kernel drivers through distribution-specific channels or AMD-provided kernel modules. Until patches are deployed, implement compensating controls by restricting local user privileges through principle of least privilege policies, disabling unnecessary local accounts, and monitoring for unusual kernel-mode driver access patterns using EDR solutions. In virtualized environments, ensure hypervisor isolation controls are maximized and consider temporarily limiting AMD PMF driver loading in guest VMs if power management features are non-critical. Note that disabling PMF entirely may impact laptop battery life optimization and thermal management, requiring trade-off assessment between security and power efficiency.