CVE-2025-52540 is an out-of-bounds write vulnerability (CWE-787) in the AMD Platform Management Framework (PMF) Driver of AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (Rembrandt R). The vulnerability arises from improper input validation, allowing a local attacker to write outside intended memory bounds. This can lead to privilege escalation on affected systems. The CVSS 4.0 vector indicates low attack complexity and no user interaction required, with high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published by AMD as of the current data.

Successful exploitation of this vulnerability may allow a local attacker to escalate privileges by performing an out-of-bounds write in the PMF driver. This could compromise system integrity and potentially lead to unauthorized control over the affected system. There are no known exploits in the wild, but the high CVSS score reflects a serious risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict local access to trusted users only and monitor AMD's security advisories for updates. No vendor-provided temporary fixes or workarounds are currently documented.