CVE-2018-8935: AMD Ryzen Firmware

Critical severity, CVSS 9.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW.

Affected products

• AMD Ryzen Firmware: affected versions not specified
• AMD Ryzen Pro Firmware: affected versions not specified

Published 2018-03-22. Last modified 2026-06-17.