An out-of-bounds write vulnerability (CWE-787) exists within the AMD Platform Management Framework on AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (Rembrandt R). This vulnerability allows an attacker with local access and low privileges to write outside intended memory boundaries, potentially enabling arbitrary code execution with elevated privileges. The CVSS 4.0 vector indicates the attack requires local access with low complexity and no user interaction, but results in high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no exploits are known in the wild.

Successful exploitation could lead to arbitrary code execution at elevated privilege levels, which may result in loss of confidentiality, integrity, and availability of the affected system. This could allow attackers to compromise system security and control. However, exploitation requires local access and low privileges, limiting remote attack feasibility. No known active exploitation has been reported.

Patch status is not yet confirmed — check the AMD vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users only and monitor for unusual activity. No official mitigation or temporary fix has been provided by AMD at this time.