CVE-2026-0482: CWE-787 Out-of-bounds Write in AMD Alveo™ Accelerator Cards
Description
CVE-2026-0482 is a medium severity vulnerability affecting AMD Alveo™ Accelerator Cards. It involves an out-of-bounds write due to insufficient boundary checks in USB boot mode when enabled by board modifications. This flaw could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, potentially leading to arbitrary code execution during the boot process. The vulnerability impacts confidentiality, integrity, and availability of the affected devices.
CVSS v4.0
Score 5.4medium
Affected software
AMD
Alveo™ Accelerator Cards
AMD
Versal™ Prime Series Adaptive SoCs
AMD
Versal™ Premium Series Adaptive SoCs
AMD
Versal™ AI Edge Series Adaptive SoCs
AMD
Versal™ AI Core Series Adaptive SoCs
AMD
Versal™ HBM Series Adaptive SoCs
AMD
Versal™ RF Series Adaptive SoCs
AMD
Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602)
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-0482) is an out-of-bounds write (CWE-787) in AMD Versal™ Adaptive SoC devices used in Alveo™ Accelerator Cards. The issue arises from insufficient boundary checks in USB boot mode, which is only enabled through specific board modifications. An attacker could exploit this by providing crafted images that cause a buffer overflow, overwriting an active function pointer. This may result in arbitrary code execution during the device's boot process, potentially compromising the system's confidentiality, integrity, and availability.
Potential Impact
Successful exploitation could allow an attacker to execute arbitrary code during the boot process of the affected AMD Alveo™ Accelerator Cards. This could compromise the confidentiality, integrity, and availability of the device and any data or processes relying on it. However, exploitation requires USB boot mode to be enabled via board modifications, which may limit the attack surface.
Mitigation Recommendations
No patch or official fix information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, avoid enabling USB boot mode through board modifications unless necessary, and monitor AMD advisories for updates.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- AMD
- Date Reserved
- 2025-12-06T15:11:34.516Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ac41b4d2cdf04f6563d8ecd
Added to database: 10/05/2026, 21:49:01 UTC
Last enriched: 10/05/2026, 22:03:36 UTC
Last updated: 10/05/2026, 22:08:19 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.