CVE-2025-52540 is an out-of-bounds write vulnerability (CWE-787) in the AMD Platform Management Framework (PMF) Driver for AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (Rembrandt R). The issue arises from improper input validation, enabling a local attacker to write outside the intended memory bounds. This can result in privilege escalation, allowing the attacker to gain higher system privileges. The vulnerability has a CVSS 4.0 score of 8.5, reflecting high severity. No patch or official remediation level has been disclosed by AMD at this time.

A successful exploitation of this vulnerability could allow a local attacker to escalate privileges on the affected system by leveraging an out-of-bounds write in the PMF driver. This could compromise system integrity and security. There are no reports of active exploitation in the wild, but the high CVSS score indicates a serious risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released by AMD, users should limit local access to trusted personnel and monitor for updates from AMD. No vendor advisory or official mitigation instructions are currently available.