CVE-2017-7262

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-25 · updated 2026-06-17
Weakness: CWE-20

Description

The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite.

Affected products

AMD Ryzen: through 2017-01-27

References

http://forum.hwbot.org/showpost.php?p=480524
http://forum.hwbot.org/showthread.php?t=167605
http://www.securityfocus.com/bid/97098
https://news.ycombinator.com/item?id=13924192
https://www.techpowerup.com/231536/amd-ryzen-machine-crashes-to-a-sequence-of-fma3-instructions
http://forum.hwbot.org/showpost.php?p=480524
http://forum.hwbot.org/showthread.php?t=167605
http://www.securityfocus.com/bid/97098
https://news.ycombinator.com/item?id=13924192
https://www.techpowerup.com/231536/amd-ryzen-machine-crashes-to-a-sequence-of-fma3-instructions

Get alerted when CVE-2017-7262 or the next vulnerability affects your stack