This vulnerability involves an uncontrolled search path element (CWE-427) in the AMD Power Design Manager (PDM) Software Un-Installer. During the uninstallation process, the software may load DLLs from an untrusted or attacker-controlled location, enabling a local attacker with limited privileges to escalate their privileges and execute arbitrary code. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no attack prerequisites, partial user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

A local attacker could exploit this vulnerability to escalate privileges during the uninstallation of AMD PDM software, potentially executing arbitrary code with elevated privileges. This could compromise system integrity and confidentiality. The impact is rated high due to the potential for privilege escalation and arbitrary code execution.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit local access to trusted users only and avoid running the uninstaller in untrusted environments. Monitor AMD's official channels for updates and apply patches promptly once available.