This vulnerability involves an out-of-bounds read (CWE-125) within the AMD Platform Management Framework on AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics. An attacker with local access and low privileges could exploit this flaw to read memory outside intended boundaries, potentially exposing sensitive information or causing system instability. The CVSS 4.0 vector indicates local attack vector, low attack complexity, partial attack type, low confidentiality impact, high availability impact, and no user interaction required. No patch or official remediation level has been disclosed by AMD.

Successful exploitation could result in unauthorized reading of arbitrary memory locations, which may lead to confidentiality breaches or denial of service conditions affecting system availability. The impact is rated medium severity based on the CVSS score of 5.8. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users and monitor for unusual activity related to platform management components. No official mitigation or workaround has been provided by AMD at this time.