This vulnerability (CVE-2025-66660) affects AMD Radeon RX 6000 Series graphics products due to improper validation of input parameters in the TEE SOC Driver. Specifically, insufficient sanitization of the DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT command can lead to incorrect shared memory mapping. The issue is classified under CWE-1284 (Improper Validation of Specified Quantity in Input). The CVSS 4.0 vector indicates the attack requires local access with high complexity and privileges, no user interaction, and results in low impact on confidentiality, integrity, and availability. No patch or remediation level is currently documented by the vendor.

The impact is low severity as indicated by the CVSS score of 1.8. The vulnerability could cause incorrect shared memory mapping and unexpected behavior but does not directly lead to privilege escalation, denial of service, or data disclosure. Exploitation requires local attacker privileges and high attack complexity. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been published by AMD, users should monitor AMD advisories for updates. No specific mitigation steps are currently documented.