This vulnerability, identified as CWE-125 (Out-of-bounds Read), affects the AMD Secure Processor TEE SOC Driver in AMD Radeon RX 6000 Series graphics products. It arises from insufficient sanitization of parameters when processing the DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command. Exploiting this flaw could allow an attacker with high privileges to cause an out-of-bounds read, potentially exposing sensitive memory contents or causing an exception in the SOC Driver. The CVSS 4.0 base score is 4.6, reflecting a medium severity with local attack vector and low impact on confidentiality, integrity, and availability. The vulnerability is published but no patch or official fix has been documented by AMD yet.

Successful exploitation could result in exposure of SOC Driver memory contents or cause exceptions, potentially affecting system stability or confidentiality of certain memory areas. The impact is limited by the requirement for high privileges and local access, and the overall severity is medium.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to systems with affected AMD Radeon RX 6000 Series graphics products to trusted users with appropriate privileges. Monitor AMD's advisories for updates on patches or mitigations.