CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.

CVSS

No CVSS.

References

Link	Resource
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8028.html

Configurations

No configuration.

History

05 Oct 2026, 22:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-05 22:16

Updated : 2026-10-06 16:00

NVD link : CVE-2026-0482

Mitre link : CVE-2026-0482

CVE.ORG link : CVE-2026-0482

JSON object : View

Products Affected

No product.

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2026-0482", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0482", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-10-06T13:49:17.250867Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "psirt@amd.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.4, "Automatable": "NOT_DEFINED", "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "psirt@amd.com", "affectedData": [{"vendor": "AMD", "product": "Alveo\u2122 Accelerator Cards", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 Prime Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 Premium Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 AI Edge Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 AI Core Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 HBM Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 RF Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602)", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}]}], "published": "2026-10-05T22:16:56.210", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8028.html", "source": "psirt@amd.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@amd.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "In AMD Versal\u2122 Adaptive SoC devices, insufficient boundary checks in USB boot mode\u2014when enabled through board modifications\u2014could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability."}], "lastModified": "2026-10-06T16:00:36.547", "sourceIdentifier": "psirt@amd.com"}

CVE-2026-0482

JSON object

Attach tags to CVE-2026-0482

Attach tags to `CVE-2026-0482`