Unauthorized Access Vulnerability in Versal AI Edge Series Gen 2 Peripheral Protection Unit by AMD
CVE-2026-0455

5.9MEDIUM

What is CVE-2026-0455?

The Versal AI Edge Series Gen 2 Peripheral Protection Unit contains a significant vulnerability where the inter-processor interrupt (IPI) buffers fail to block unauthorized access. This flaw permits any processor within the system-on-chip (SoC) that has access to an IPI channel to read and manipulate the entire IPI buffer register space as well as the IPI no-buffer register control space, potentially leading to data leakage and unauthorized data modification.

Affected Version(s)

Versal™ AI Edge Series Gen 2 Adaptive SoCs 2026.1

Versal™ Prime Series Gen 2 Adaptive SoCs (2VM3358, 2VM3558, and 2VM3858 only) 2026.1

VivadoTM Advanced Configuration Editor for Versal™ AI Edge Series Gen 2 2026.1

References

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.