This vulnerability (CVE-2025-0040) concerns improper access control (CWE-284) in AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics. Specifically, the access control between the Joint Test Action Group (JTAG) interface and the Advanced Extensible Interface (AXI) is flawed. An attacker with physical access could leverage this to read or overwrite cross-chip debug (XCD) registers, potentially compromising data integrity or confidentiality. The CVSS 4.0 base score is 5.3, reflecting medium severity, with attack vector requiring physical presence and high attack complexity. No patch or remediation level is currently provided by AMD, and no known exploits have been observed.

An attacker with physical access to the affected processors could exploit the improper access control to read or modify sensitive debug registers. This could result in unauthorized disclosure or alteration of data within the processor, impacting data integrity and confidentiality. However, exploitation requires physical access and is considered complex, limiting the scope of impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided by AMD at this time, monitor AMD's advisories for updates. Physical security controls to prevent unauthorized physical access to affected devices are recommended as a precaution.