This vulnerability arises from improper validation of parameters in the AMD Secure Processor Trusted Execution Environment (TEE) SOC Driver within AMD Radeon RX 6000 Series graphics products. Specifically, an attacker with high privileges can send a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command, causing an out-of-bounds read (CWE-125). This may lead to exposure of sensitive SOC Driver memory or cause an exception in the driver. The CVSS 4.0 base score is 4.6, reflecting a medium severity with local attack vector, low complexity, and no user interaction required. No patch or official remediation level has been disclosed by AMD as of the publication date.

Successful exploitation could result in unauthorized reading of memory beyond intended boundaries within the SOC Driver, potentially exposing sensitive information or causing system instability through exceptions. The attack requires local access with high privileges, limiting the attack surface. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the AMD vendor advisory for current remediation guidance. Until an official fix is released, restrict high privilege local access to trusted users only to reduce risk. Monitor AMD communications for updates on patches or mitigations.