CVE-2018-8932

Name: CVE-2018-8932
Creator: NVD / NIST
Published: 2018-03-22T14:29:00.737+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.72%

Last modified Jun 17, 2026

CVE-2018-8932 is a vulnerability of currently unknown severity. The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4.. EPSS estimates a 1.72% chance of exploitation in the next 30 days.

Description

The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4.

Metrics

EPSS Probability

1.72%

74.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-732

Affected Software

Vendor	Product	Versions
Amd	Ryzen Pro Firmware	All versions
Amd	Ryzen Firmware	All versions

References

https://amdflaws.com/Third Party Advisory
https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/Third Party Advisory
https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-researchVendor Advisory
https://safefirmware.com/amdflaws_whitepaper.pdfThird Party Advisory
https://amdflaws.com/Third Party Advisory
https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/Third Party Advisory
https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-researchVendor Advisory
https://safefirmware.com/amdflaws_whitepaper.pdfThird Party Advisory

Timeline

Published: Mar 22, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-8932?

The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4.

How severe is CVE-2018-8932?

Severity scoring for CVE-2018-8932 is pending analysis. The EPSS model estimates a 1.72% probability of exploitation in the next 30 days.

How do I fix CVE-2018-8932?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-8932?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST