This vulnerability (CVE-2025-62625) affects AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics. It arises from improper privilege management in the KVM key download component, which could enable an attacker to swap tokens and download sensitive keys. The CVSS 4.0 base score is 6.0 (medium severity), reflecting network attack vector, high complexity, low privileges required, no user interaction, and high confidentiality impact. The vulnerability could result in unauthorized access to privileged resources and compromise of sensitive keys. No patch or official remediation level has been published by AMD as of the data provided.

An attacker exploiting this vulnerability could gain unauthorized access to privileged resources by swapping tokens and downloading sensitive keys, leading to potential loss of confidentiality of sensitive information. The impact is limited by the requirement of low privileges and high attack complexity, with no known exploits in the wild currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided by AMD, organizations should monitor AMD advisories for updates. Until a patch is available, restrict access to affected systems and limit privileges where possible to reduce risk.