Israeli security firm CTS Labs has released a white paper to the press which detail a number of vulnerabilities affecting current AMD CPUs.
The 13 vulnerabilities listed in the white paper allegedly affect all Ryzen and Ryzen Pro products currently on the market, as well as EPYC server CPUs made by AMD, although root-level (administrator) operating system access is required in order to exploit them.
As is the case with many security exploits, these could theoretically allow hackers access to personal credentials and provide an opportunity to spread malware, but the white paper also warns of the potential for “long-term industrial espionage”.
AMD responds
The report from CTS Labs is intentionally light on the exploits’ details – a measure intended to stop anyone from using the alleged exploits while AMD is given the time to investigate them. Despite this, Gizmodo reports that CTS only gave AMD 24 hours notice before making the white paper public.
In the company’s official statement on the issue, AMD said it was “unusual for a security firm to publish research to the press without providing a reasonable amount of time for the company to investigate and address its findings”.
Naturally, AMD is “actively investigating and analyzing” the report’s findings, and we’ll keep this article updated with further details as they come to light.
Micron launches 36GB HBM3E memory as it plays catch up with Samsung and SK Hynix as archrivals frantically rush towards the next big thing — HBM4 with its 16 layers, 1.65TBps bandwidth, and 48GB SKUs
Just in time for Black Friday? Samsung may be preparing for launch of 990 Pro successor — PM9E1 SSD is its first PCIe 5.0 SSD but it isn't aimed at end users
