This vulnerability arises from improper isolation of the VCN-JPEG hardware register space in AMD Radeon™ RX 7000 Series Graphics Products. A malicious guest VM or process with low privileges could exploit this flaw to gain unauthorized read/write access to the JPEG core registers assigned to another VM or process, potentially compromising the confidentiality and integrity of that victim's data. The issue is classified under CWE-284, indicating an access control weakness. The CVSS 4.0 vector indicates local attack vector with low complexity, requiring privileges but no user interaction, and with high impact on confidentiality, integrity, availability, and security scope. No vendor advisory or patch information is currently available.

Successful exploitation could allow a malicious guest VM or process to bypass isolation boundaries and access or modify data belonging to another VM or process via the JPEG core registers. This could lead to data leakage or corruption within affected systems using AMD Radeon™ RX 7000 Series Graphics Products. The vulnerability impacts confidentiality, integrity, and availability of victim VMs/processes. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting untrusted guest VM or process access to the affected hardware resources where possible. Monitor AMD's security advisories for updates on patches or mitigations.