CVE-2026-0482

State: Published
Severity: 5.4 Medium
Published: Oct 5, 2026
Updated: Oct 6, 2026
Reserved: Dec 6, 2025

Description

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.

Scores

CVSS	Score	Vector	Source
4.0	5.4 Medium	CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L	AMD

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
Alveo™ Accelerator CardsAMD	2026.1Not affected
Versal™ Prime Series Adaptive SoCsAMD	2026.1Not affected
Versal™ Premium Series Adaptive SoCsAMD	2026.1Not affected
Versal™ AI Edge Series Adaptive SoCsAMD	2026.1Not affected
Versal™ AI Core Series Adaptive SoCsAMD	2026.1Not affected
Versal™ HBM Series Adaptive SoCsAMD	2026.1Not affected
Versal™ RF Series Adaptive SoCsAMD	2026.1Not affected
Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602)AMD	2026.1Not affected

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8028.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.