Buffer overflow in AMD products - CVE-2026-0482

Vulnerability identifier: #VU152867

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-0482

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the USB boot mode. An attacker with physical access can use a specially crafted images, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Versal Premium Series Gen 2 Adaptive SOCs (2VP3402,2VP3502, 2VP3602)
Versal Prime Series Adaptive SoCs
Versal Premium Series Adaptive SoCs
Versal AI Edge Series Adaptive SoCs
Versal AI Core Series Adaptive SoCs
Versal HBM Series Adaptive SoCs
Versal RF Series Adaptive SoCs

Install updates from vendor's website.

Versal Premium Series Gen 2 Adaptive SOCs (2VP3402,2VP3502, 2VP3602) - update to 2026.1
Versal Prime Series Adaptive SoCs - update to 2026.1
Versal Premium Series Adaptive SoCs - update to 2026.1
Versal AI Edge Series Adaptive SoCs - update to 2026.1
Versal AI Core Series Adaptive SoCs - update to 2026.1
Versal HBM Series Adaptive SoCs - update to 2026.1
Versal RF Series Adaptive SoCs - update to 2026.1

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8028.html

• Code execution in AMD Versal Adaptive SoC devices