This vulnerability involves incorrect default permissions set on the installation directory of the AMD GPIO controller in Ryzen 4000 Series Mobile Processors with Radeon Graphics (Renoir). Due to these permissions, an attacker with local access and limited privileges could escalate their privileges, potentially leading to arbitrary code execution. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no attack technique required, partial user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by AMD as of the publication date.

An attacker with local access and limited privileges could exploit this vulnerability to escalate privileges and execute arbitrary code, potentially compromising system confidentiality, integrity, and availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users only and monitor for suspicious activity related to privilege escalation attempts.