Minisforum HM80 Owners Denied BIOS Security Fix for Ryzen 4800U TPM Flaws

Minisforum has left owners of its HM80 mini PC without a fix for critical security flaws in the system firmware. The company refused to release a BIOS update that addresses high-severity vulnerabilities in the processor's trusted platform module. This decision forces users to choose between running a device with known security risks or purchasing a replacement system. Buyers who rely on the HM80 for secure computing tasks now face a gap in vendor support that affects the long-term viability of their hardware.

Minisforum refuses to release BIOS update addressing high-severity vulnerabilities in the system firmware

The HM80 launched in 2021 with the Ryzen 7 4800U processor, an eight-core chip from AMD's Renoir family. AMD recently identified two high-severity TPM vulnerabilities in this processor line and published security bulletin SB-7064 to document the issue. The chip remains a capable component for general computing, but the firmware gap exposes the system to potential exploitation. Owners of this specific model can no longer rely on the manufacturer to patch these foundational security holes.

• Processor: Ryzen 7 4800U
• Affected AMD Firmware: RenoirPI-FP6 1.0.0.Ee
• AMD Security Bulletin: AMD SB-7064

AMD supplied the necessary security fix, identified as firmware version RenoirPI-FP6 1.0.0.Ee, to original equipment manufacturers in May 2026. This firmware update contains the mitigation required to resolve the TPM vulnerabilities outlined in the security bulletin. Minisforum's support page for the HM80 does not list a BIOS download for this update or any other version. The absence of the file on the official support site confirms that the vendor has not distributed the patch to end users.

A user reported that Minisforum support initially treated the request as a performance-related BIOS update and recommended buying a newer model. The support agent later cited the HM80 being outside its warranty period as a reason for refusing the fix. The user did not provide emails that confirm the interaction with Minisforum support, leaving the exact conversation unverified. This account highlights a broader issue where older hardware is left unsupported despite the availability of security patches from the component manufacturer.