This vulnerability (CVE-2025-48520) involves an out-of-bounds read (CWE-125) caused by improper input validation in the AMD Platform Management Framework driver on AMD Ryzen 7035 Series Processors with Radeon Graphics. A local attacker with limited privileges can exploit this flaw to read memory beyond allocated boundaries, potentially leading to information disclosure or system instability. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no user interaction required, and high impact on availability. No patch or official remediation level has been published by AMD as of the current data.

Successful exploitation can result in unauthorized disclosure of information or cause a system crash due to out-of-bounds memory reads. The vulnerability requires local access with low privileges and does not require user interaction. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users and monitor for unusual system behavior related to the PMF driver. Avoid running untrusted code locally on affected systems.