CVE-2018-8932 The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4.
CriticalCVSS 9.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd ryzen pro firmware | All versions | No fix listed |
| amd ryzen firmware | All versions | No fix listed |
References
- amdflaws.com third-party-advisory
- blog.trailofbits.com third-party-advisory
- community.amd.com vendor-advisory
- safefirmware.com third-party-advisory