CVE-2026-0482

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0482", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2025-12-06T15:11:34.516Z", "datePublished": "2026-10-05T21:35:24.791Z", "dateUpdated": "2026-10-06T13:49:53.907Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2026-10-05T21:35:24.791Z"}, "affected": [{"defaultStatus": "affected", "vendor": "AMD", "product": "Alveo\u2122 Accelerator Cards", "versions": [{"version": "2026.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Versal\u2122 Prime Series Adaptive SoCs", "versions": [{"version": "2026.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Versal\u2122 Premium Series Adaptive SoCs", "versions": [{"version": "2026.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Versal\u2122 AI Edge Series Adaptive SoCs", "versions": [{"version": "2026.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Versal\u2122 AI Core Series Adaptive SoCs", "versions": [{"version": "2026.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Versal\u2122 HBM Series Adaptive SoCs", "versions": [{"version": "2026.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Versal\u2122 RF Series Adaptive SoCs", "versions": [{"version": "2026.1", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602)", "versions": [{"version": "2026.1", "status": "unaffected"}]}], "datePublic": "2026-10-05T21:34:58.906Z", "descriptions": [{"lang": "en", "value": "In AMD Versal\u2122 Adaptive SoC devices, insufficient boundary checks in USB boot mode\u2014when enabled through board modifications\u2014could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.", "supportingMedia": [{"base64": false, "type": "text/html", "value": "In AMD Versal\u2122 Adaptive SoC devices, insufficient boundary checks in USB boot mode\u2014when enabled through board modifications\u2014could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.<br>"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write", "lang": "en", "type": "CWE"}]}], "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8028.html"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "AMD PSIRT Automation 1.0"}, "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "attackVector": "PHYSICAL", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "subAvailabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-06T13:49:17.250867Z", "id": "CVE-2026-0482", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T13:49:53.907Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 5.4, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AMD", "product": "Alveo\u2122 Accelerator Cards", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 Prime Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 Premium Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 AI Edge Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 AI Core Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 HBM Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal\u2122 RF Series Adaptive SoCs", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602)", "versions": [{"status": "unaffected", "version": "2026.1"}], "defaultStatus": "affected"}], "datePublic": "2026-10-05T21:34:58.906Z", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8028.html"}], "x_generator": {"engine": "AMD PSIRT Automation 1.0"}, "descriptions": [{"lang": "en", "value": "In AMD Versal\u2122 Adaptive SoC devices, insufficient boundary checks in USB boot mode\u2014when enabled through board modifications\u2014could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.", "supportingMedia": [{"type": "text/html", "value": "In AMD Versal\u2122 Adaptive SoC devices, insufficient boundary checks in USB boot mode\u2014when enabled through board modifications\u2014could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2026-10-05T21:35:24.791Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0482", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-06T13:49:17.250867Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-10-06T13:49:45.955Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-0482", "state": "PUBLISHED", "dateUpdated": "2026-10-05T21:35:24.791Z", "dateReserved": "2025-12-06T15:11:34.516Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2026-10-05T21:35:24.791Z", "assignerShortName": "AMD"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "Alveo\u2122 Accelerator Cards", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "2026.1"}]}, {"defaultStatus": "affected", "product": "Versal\u2122 Prime Series Adaptive SoCs", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "2026.1"}]}, {"defaultStatus": "affected", "product": "Versal\u2122 Premium Series Adaptive SoCs", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "2026.1"}]}, {"defaultStatus": "affected", "product": "Versal\u2122 AI Edge Series Adaptive SoCs", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "2026.1"}]}, {"defaultStatus": "affected", "product": "Versal\u2122 AI Core Series Adaptive SoCs", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "2026.1"}]}, {"defaultStatus": "affected", "product": "Versal\u2122 HBM Series Adaptive SoCs", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "2026.1"}]}, {"defaultStatus": "affected", "product": "Versal\u2122 RF Series Adaptive SoCs", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "2026.1"}]}, {"defaultStatus": "affected", "product": "Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602)", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "2026.1"}]}], "source": "psirt@amd.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In AMD Versal\u2122 Adaptive SoC devices, insufficient boundary checks in USB boot mode\u2014when enabled through board modifications\u2014could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability."}], "id": "CVE-2026-0482", "lastModified": "2026-10-06T16:00:36.547", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "PHYSICAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@amd.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0482", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-06T13:49:17.250867Z", "version": "2.0.3"}}]}, "published": "2026-10-05T22:16:56.210", "references": [{"source": "psirt@amd.com", "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8028.html"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "psirt@amd.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "2026.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Alveo\u2122 Accelerator Cards", "source": "cna", "vendor": "AMD"}, "product": "alveo_accelerator_cards", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "2026.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Versal\u2122 AI Core Series Adaptive SoCs", "source": "cna", "vendor": "AMD"}, "product": "versal_ai_core_series_adaptive_socs", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "2026.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Versal\u2122 AI Edge Series Adaptive SoCs", "source": "cna", "vendor": "AMD"}, "product": "versal_ai_edge_series_adaptive_socs", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "2026.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Versal\u2122 HBM Series Adaptive SoCs", "source": "cna", "vendor": "AMD"}, "product": "versal_hbm_series_adaptive_socs", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "2026.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Versal\u2122 Premium Series Adaptive SoCs", "source": "cna", "vendor": "AMD"}, "product": "versal_premium_series_adaptive_socs", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "2026.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602)", "source": "cna", "vendor": "AMD"}, "product": "versal_premium_series_gen_2_adaptive_socs", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "2026.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Versal\u2122 Prime Series Adaptive SoCs", "source": "cna", "vendor": "AMD"}, "product": "versal_prime_series_adaptive_socs", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "2026.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Versal\u2122 RF Series Adaptive SoCs", "source": "cna", "vendor": "AMD"}, "product": "versal_rf_series_adaptive_socs", "vendor": "amd"}], "created": "2026-10-05T22:30:19.108248+00:00", "title": "Insufficient USB boot boundary check enabling buffer overflow and arbitrary code execution", "updated": "2026-10-06T20:56:40.803681+00:00", "vendors": ["amd", "amd$PRODUCT$alveo_accelerator_cards", "amd$PRODUCT$versal_ai_core_series_adaptive_socs", "amd$PRODUCT$versal_ai_edge_series_adaptive_socs", "amd$PRODUCT$versal_hbm_series_adaptive_socs", "amd$PRODUCT$versal_premium_series_adaptive_socs", "amd$PRODUCT$versal_premium_series_gen_2_adaptive_socs", "amd$PRODUCT$versal_prime_series_adaptive_socs", "amd$PRODUCT$versal_rf_series_adaptive_socs"]}