This vulnerability in AMD Radeon™ RX 7000 Series Graphics Products arises from improper isolation of the VCN-JPEG hardware register space. A malicious guest VM or process with local access and low privileges could exploit this flaw to gain unauthorized read/write access to the JPEG core registers assigned to another VM or process, potentially compromising the victim's data confidentiality and integrity. The CVSS 4.0 base score is 8.8, indicating high severity, with attack vector local, low attack complexity, and partial privileges required.

The vulnerability allows a malicious local guest VM or process to bypass isolation boundaries and access the JPEG core register space of another VM or process. This could result in unauthorized arbitrary read and write access to sensitive data belonging to the victim VM or process, potentially leading to data compromise or corruption. There is no evidence of known exploits in the wild at this time.

Patch status is not yet confirmed — check the AMD vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users and processes to reduce risk. Monitor AMD communications for updates on patches or mitigations.