{"id":"CVE-2026-0482","title":"In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may resul…","summary":"In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may resul…","severity":"medium","cvss":5.4,"cvssVector":"CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","cwe":["CWE-787"],"vendor":"AMD","product":"Alveo™ Accelerator Cards","affected":["alveo_accelerator_cards (all versions)","versal_prime_series_adaptive_socs (all versions)","versal_premium_series_adaptive_socs (all versions)","versal_ai_edge_series_adaptive_socs (all versions)","versal_ai_core_series_adaptive_socs (all versions)","versal_hbm_series_adaptive_socs (all versions)","versal_rf_series_adaptive_socs (all versions)","versal_premium_series_gen_2_adaptive_socs_2vp3402_2vp3502_2vp3602 (all versions)"],"published":"2026-10-05","updated":"2026-10-05","sourceUpdated":"2026-10-05T22:16:56.210","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-0482","references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8028.html","label":"psirt@amd.com"}],"tags":["nvd","cve.org"],"cvssSource":"cna","ingestedAt":"2026-10-05T22:35:24.734Z","slug":"CVE-2026-0482","body":"## Overview\n\nIn AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}