CVE-2019-9836: AMD Secure Encrypted Virtualization Firmware

Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.

Affected products

• AMD Secure Encrypted Virtualization Firmware: up to and including 0.17b11
• Opensuse Leap: version 15.0 only; version 15.1 only

Published 2019-06-25. Last modified 2026-06-17.