CVE-2026-0461
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution during the boot process. This issue could impact the confidentiality, integrity, or availability of affected system.
CVE-2026-0461
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-0461
Zynq™ UltraScale+ MPSoCs
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Zynq™ UltraScale+ RFSoCs
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Kria SOMs
Source reference: /containers/cna/affected/2/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "AMD",
"product": "Zynq™ UltraScale+ MPSoCs",
"versions": [
{
"status": "unaffected",
"version": "2026.1"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "Zynq™ UltraScale+ RFSoCs",
"versions": [
{
"status": "unaffected",
"version": "2026.1"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "Kria SOMs",
"versions": [
{
"status": "unaffected",
"version": "2026.1"
}
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-0461
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #9280 · Revision 1
- Added to Heist Feed
- Publisher date