CVE-2026-0482: AMD Alveo™ Accelerator Cards, грешка в паметта

Описание

Оригинално описание

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.

Засегнати продукти

• AMD Alveo™ Accelerator Cards: 2026.1
• AMD Versal™ Prime Series Adaptive SoCs: 2026.1
• AMD Versal™ Premium Series Adaptive SoCs: 2026.1
• AMD Versal™ AI Edge Series Adaptive SoCs: 2026.1
• AMD Versal™ AI Core Series Adaptive SoCs: 2026.1
• AMD Versal™ HBM Series Adaptive SoCs: 2026.1
• AMD Versal™ RF Series Adaptive SoCs: 2026.1
• AMD Versal Premium Series Gen 2 Adaptive SOCs (2VP3402, 2VP3502, 2VP3602): 2026.1

Вид слабост

• CWE-787 Out-of-bounds Write

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-0482
• https://nvd.nist.gov/vuln/detail/CVE-2026-0482
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8028.html