CVE-2026-0461

Zynq™ UltraScale+ MPSoCs · Vulnerability

CVSS 4.0 7.5 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-0461

Published

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution during the boot process. This issue could impact the confidentiality, integrity, or availability of affected system.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-0461

Published

Zynq™ UltraScale+ MPSoCs

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "affected",
                    "vendor": "AMD",
                    "product": "Zynq™ UltraScale+ MPSoCs",
                    "versions": [
                        {
                            "version": "2026.1",
                            "status": "unaffected"
                        }
                    ]
                }

Zynq™ UltraScale+ RFSoCs

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "affected",
                    "vendor": "AMD",
                    "product": "Zynq™ UltraScale+ RFSoCs",
                    "versions": [
                        {
                            "version": "2026.1",
                            "status": "unaffected"
                        }
                    ]
                }

Kria SOMs

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "affected",
                    "vendor": "AMD",
                    "product": "Kria SOMs",
                    "versions": [
                        {
                            "version": "2026.1",
                            "status": "unaffected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON