TI-2026-67902 Aliases CVE-2026-0482 GHSA-w4wm-q9h6-q3vf

Buffer overflow in AMD Versal adaptive SoC USB boot mode

LOW 25CWE-787Published 2026-10-05 · Updated 2026-10-06

Key facts

Attack vector: Physical
Privileges required: None
User interaction: None
Attack complexity: High
Attack requirements: None
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

AMD Versal Adaptive SoC devices and Alveo Accelerator Cards have insufficient boundary checks in USB boot mode when it is enabled through board modifications. Crafted images could trigger a buffer overflow (CWE-787), overwriting an active function pointer and potentially executing arbitrary code during the boot process. The flaw could affect confidentiality, integrity and availability.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00132 2nd percentileScored 2026-11-07

Fix Fixed Alveo™ Accelerator Cards (AMD): 2026.1Versal™ Prime Series Adaptive SoCs (AMD): 2026.1+6 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
AMD	Alveo™ Accelerator Cards	—	2026.1	Patch available	CNA
AMD	Versal™ Prime Series Adaptive SoCs	—	2026.1	Patch available	CNA
AMD	Versal™ Premium Series Adaptive SoCs	—	2026.1	Patch available	CNA
AMD	Versal™ AI Edge Series Adaptive SoCs	—	2026.1	Patch available	CNA
AMD	Versal™ AI Core Series Adaptive SoCs	—	2026.1	Patch available	CNA
AMD	Versal™ HBM Series Adaptive SoCs	—	2026.1	Patch available	CNA
AMD	Versal™ RF Series Adaptive SoCs	—	2026.1	Patch available	CNA
AMD	Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602)	—	2026.1	Patch available	CNA

Alveo™ Accelerator Cards VendorAMD Affected — Fixed in 2026.1 Patch available CNA
Versal™ Prime Series Adaptive SoCs VendorAMD Affected — Fixed in 2026.1 Patch available CNA
Versal™ Premium Series Adaptive SoCs VendorAMD Affected — Fixed in 2026.1 Patch available CNA
Versal™ AI Edge Series Adaptive SoCs VendorAMD Affected — Fixed in 2026.1 Patch available CNA
Versal™ AI Core Series Adaptive SoCs VendorAMD Affected — Fixed in 2026.1 Patch available CNA
Versal™ HBM Series Adaptive SoCs VendorAMD Affected — Fixed in 2026.1 Patch available CNA
Versal™ RF Series Adaptive SoCs VendorAMD Affected — Fixed in 2026.1 Patch available CNA
Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602) VendorAMD Affected — Fixed in 2026.1 Patch available CNA

Remediation

Fixed in version 2026.1 for Alveo™ Accelerator Cards, Versal™ Prime Series Adaptive SoCs, Versal™ Premium Series Adaptive SoCs, Versal™ AI Edge Series Adaptive SoCs, Versal™ AI Core Series Adaptive SoCs, Versal™ HBM Series Adaptive SoCs, Versal™ RF Series Adaptive SoCs and Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602).

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Fix · CNA Alveo™ Accelerator Cards (AMD) Fixed in 2026.1
Fix · CNA Versal™ Prime Series Adaptive SoCs (AMD) Fixed in 2026.1
Fix · CNA Versal™ Premium Series Adaptive SoCs (AMD) Fixed in 2026.1
Fix · CNA Versal™ AI Edge Series Adaptive SoCs (AMD) Fixed in 2026.1
Fix · CNA Versal™ AI Core Series Adaptive SoCs (AMD) Fixed in 2026.1
Fix · CNA Versal™ HBM Series Adaptive SoCs (AMD) Fixed in 2026.1
Fix · CNA Versal™ RF Series Adaptive SoCs (AMD) Fixed in 2026.1
Fix · CNA Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602) (AMD) Fixed in 2026.1

Timeline

2026-10-06 Threatist record created from CVE-2026-0482
2026-10-06 Alias added: GHSA-w4wm-q9h6-q3vf
2026-10-06 CISA SSVC decision points changed
2026-10-06 Priority changed: MEDIUM → LOW

References

Other 1

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8028.html

TI-2026-36341 AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization CVSS 4.0CRITICAL 9.2
TI-2023-07046 Improper privilege management in AMD Radeon™ RX 5000 Series Graphics Cards CVSS 3.1HIGH 7.8
TI-2023-04574 GPU kernel implementations susceptible to memory leak CVSS 3.1MEDIUM 6.5
TI-2023-07042 Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop… CVSS 3.1MEDIUM 5.5
TI-2023-23747 PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers… CVSS 3.1MEDIUM 5.3
TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to… CVSS 3.1CRITICAL 9.8

See all 508 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences