CVE-2018-8931

CRITICAL

AMD Ryzen Mobile Firmware - Incorrect Permission Assignment

Title source: rule

The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1.

Core 4

Core References

Third Party Advisory x_refsource_misc

Third Party Advisory x_refsource_misc

Vendor Advisory x_refsource_misc

Third Party Advisory x_refsource_misc

CVSS v3 9.0

EPSS 0.0046

EPSS Percentile 64.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE

CWE-732

Status published

Products (3)

amd/ryzen_firmware

amd/ryzen_mobile_firmware

amd/ryzen_pro_firmware

Published Mar 22, 2018

Tracked Since Feb 18, 2026