AMD Secure Processor Power State Management Vulnerability Allowing Unauthorized VCN Firmware Modifications

A vulnerability exists in the AMD Secure Processor (ASP) related to improper management of hardware configuration integrity during power save and restore operations. This flaw could enable an attacker with the capability to write outside the trusted memory range (TMR) to alter the execution flow of the Video Core Next (VCN) firmware. Such a modification could potentially disrupt the confidentiality, integrity, or availability of the system.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in the execution of the VCN firmware, with possible negative effects on the system's confidentiality, integrity, or availability.

Remediation

Users are advised to update to the Platform Initialization (PI) firmware version 1.2.0.CA, which will be available through OEM channels.