This vulnerability (CVE-2025-62628) relates to an uncontrolled search path element (CWE-427) in the AMD AIM-T Manageability Service. Specifically, unsafe OpenSSL initialization in certain AMD optional tools allows a local user with limited privileges to inject a malicious DLL, potentially resulting in arbitrary code execution. The CVSS 4.0 base score is 7.0, indicating high severity, with attack vector local, low attack complexity, and partial user interaction required. The vulnerability is published and assigned by AMD, but no patch or official remediation level has been provided yet.

A local user with limited privileges could exploit this vulnerability to inject a malicious DLL due to unsafe OpenSSL initialization, potentially leading to arbitrary code execution within the context of the AIM-T Manageability Service. This could compromise the affected system's integrity and security. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local user access to trusted personnel and monitor for unusual activity related to the AIM-T Manageability Service. Avoid running the affected tools with elevated privileges if possible.