CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.

Score

CVSS 4.0 5.4 Medium

Status

Awaiting Analysis - psirt@amd.com

Published

2026-10-05

Last modified

2026-10-06

Weaknesses

CWE-787

Affected products

• 2vp3502 (Amd)
• 2vp3602 (Amd)
• Alveo Accelerator Cards (Amd)
• Versal Ai Core Series Adaptive Socs (Amd)
• Versal Ai Edge Series Adaptive Socs (Amd)
• Versal Hbm Series Adaptive Socs (Amd)
• Versal Premium Series Adaptive Socs (Amd)
• Versal Premium Series Gen 2 Adaptive Socs 2vp3402 (Amd)
• Versal Prime Series Adaptive Socs (Amd)
• Versal Rf Series Adaptive Socs (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8028.html