CVE-2026-0482
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow…
- Published
- Updated
- Reserved
- Assigned by
- AMD
Description
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| AMDCNA (assigner) | 4.0 | Medium5.4 | CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L |
| NVDNVD · Awaiting Analysis | 4.0 | Medium5.4 | CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.13% · top 97% of all CVEs (5 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.4.
Weakness
Affected products
AMD · Alveo™ Accelerator Cards
- unaffected 2026.1
AMD · Versal™ Prime Series Adaptive SoCs
- unaffected 2026.1
AMD · Versal™ Premium Series Adaptive SoCs
- unaffected 2026.1
AMD · Versal™ AI Edge Series Adaptive SoCs
- unaffected 2026.1
AMD · Versal™ AI Core Series Adaptive SoCs
- unaffected 2026.1
AMD · Versal™ HBM Series Adaptive SoCs
- unaffected 2026.1
AMD · Versal™ RF Series Adaptive SoCs
- unaffected 2026.1
AMD · Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602)
- unaffected 2026.1
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2026-0482)Record last updated .