Medium severity · published Oct 5, 2026
CVE-2026-0482
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow…
5.4
CVSS
0.1%
EPSS
No
On KEV
Description
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Alveo™ Accelerator Cards · AMD
All versions, or not specified · source: vendor
VP
Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602) · AMD
All versions, or not specified · source: vendor
VA
Versal™ AI Core Series Adaptive SoCs · AMD
All versions, or not specified · source: vendor
VA
Versal™ AI Edge Series Adaptive SoCs · AMD
All versions, or not specified · source: vendor
VH
Versal™ HBM Series Adaptive SoCs · AMD
All versions, or not specified · source: vendor
VP
Versal™ Premium Series Adaptive SoCs · AMD
All versions, or not specified · source: vendor
VP
Versal™ Prime Series Adaptive SoCs · AMD
All versions, or not specified · source: vendor
VR
Versal™ RF Series Adaptive SoCs · AMD
All versions, or not specified · source: vendor
