AMD Ryzen and Embedded Processors Memory Access Vulnerability Allowing Integrity Loss

A vulnerability exists in AMD Ryzen and Ryzen Embedded series processors, where a compromised Trusted OS (TOS) driver could issue a malformed call. This could lead to unauthorized memory access outside the intended range, potentially causing a loss of integrity. The issue affects several different versions and ranges of AMD Ryzen and Ryzen Embedded processors.

Impact

Exploitation of this vulnerability could result in unauthorized memory access, leading to a potential loss of integrity.

Remediation

Users are advised to update to the Platform Initialization (PI) firmware version ComboAM4 V2 PI 1.2.0.8, which is available through OEMs. For AMD Ryzen Embedded V2000 Series Processors, the recommended version is EmbeddedPI-FP6_1.0.0.9.