CVE-2019-5478: AMD ZU11EG Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.

Affected products

  • AMD ZU11EG Firmware: affected versions not specified
  • AMD ZU15EG Firmware: affected versions not specified
  • AMD ZU17EG Firmware: affected versions not specified
  • AMD ZU19EG Firmware: affected versions not specified
  • AMD ZU1CG Firmware: affected versions not specified
  • AMD ZU1EG Firmware: affected versions not specified
  • AMD ZU21DR Firmware: affected versions not specified
  • AMD ZU25DR Firmware: affected versions not specified
  • AMD ZU27DR Firmware: affected versions not specified
  • AMD ZU28DR Firmware: affected versions not specified
  • AMD ZU29DR Firmware: affected versions not specified
  • AMD ZU2CG Firmware: affected versions not specified
  • AMD ZU2EG Firmware: affected versions not specified
  • AMD ZU39DR Firmware: affected versions not specified
  • AMD ZU3CG Firmware: affected versions not specified
  • AMD ZU3EG Firmware: affected versions not specified
  • AMD ZU3TCG Firmware: affected versions not specified
  • AMD ZU3TEG Firmware: affected versions not specified
  • AMD ZU42DR Firmware: affected versions not specified
  • AMD ZU43DR Firmware: affected versions not specified
  • AMD ZU46DR Firmware: affected versions not specified
  • AMD ZU47DR Firmware: affected versions not specified
  • AMD ZU48DR Firmware: affected versions not specified
  • AMD ZU49DR Firmware: affected versions not specified
  • AMD ZU4CG Firmware: affected versions not specified
  • and 16 more

Published 2019-09-03. Last modified 2026-06-17.