Log in Start free

Vulnerability · Published Oct 5, 2026 · Assigned by AMD

CVE-2026-0482

Medium 5.4

In plain English

A medium-severity out-of-bounds write in Alveo™ Accelerator Cards from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 4.0)5.4Medium
Exploit odds (30 days)0.1%top 97.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.

Affected products (as reported)

VendorProductVersions
AMD Alveo™ Accelerator Cards see references
AMD Versal™ Prime Series Adaptive SoCs see references
AMD Versal™ Premium Series Adaptive SoCs see references
AMD Versal™ AI Edge Series Adaptive SoCs see references
AMD Versal™ AI Core Series Adaptive SoCs see references
AMD Versal™ HBM Series Adaptive SoCs see references
AMD Versal™ RF Series Adaptive SoCs see references
AMD Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602) see references

Weakness: CWE-787 · Vector: CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

References