AMD Versal SoC USB Boot Buffer Overflow Arbitrary Code Execution
CVE-2026-0482 Published on October 5, 2026

In AMD Versal Adaptive SoC devices, insufficient boundary checks in USB boot modewhen enabled through board modificationscould allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.

NVD

Vulnerability Analysis

CVE-2026-0482 is exploitable with physical access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
PHYSICAL
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
NONE

Weakness Type

What is a Memory Corruption Vulnerability?

The software writes data past the end, or before the beginning, of the intended buffer. Typically, this can result in corruption of data, a crash, or code execution. The software may modify an index or perform pointer arithmetic that references a memory location that is outside of the boundaries of the buffer. A subsequent write operation then produces undefined or unexpected results.

CVE-2026-0482 has been classified to as a Memory Corruption vulnerability or weakness.


Affected Versions

AMD Alveo™ Accelerator Cards: AMD Versal™ Prime Series Adaptive SoCs: AMD Versal™ Premium Series Adaptive SoCs: AMD Versal™ AI Edge Series Adaptive SoCs: AMD Versal™ AI Core Series Adaptive SoCs: AMD Versal™ HBM Series Adaptive SoCs: AMD Versal™ RF Series Adaptive SoCs: AMD Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602):