This vulnerability (CVE-2025-48512) involves incorrect default permissions set on the installation directory of the AMD general-purpose input/output (GPIO) controller in AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics (Renoir). The weakness is classified as CWE-276 (Incorrect Default Permissions). An attacker with local access and limited privileges could exploit this to escalate privileges and execute arbitrary code. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no attack traceability, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published by AMD as of the data provided.

The vulnerability allows an attacker with local access and limited privileges to escalate their privileges to higher levels, potentially leading to arbitrary code execution. This could compromise system confidentiality, integrity, and availability. However, exploitation requires local access and user interaction, which limits remote exploitation scenarios. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided by AMD, users should monitor AMD's security advisories for updates. Until a fix is available, restricting local access and limiting user privileges may reduce risk.