Zynq UltraScale+ RFSoCs vulnerabilities

2 known vulnerabilities in Zynq UltraScale+ RFSoCs from AMD. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Zynq™ UltraScale+ MPSoCs: Out-of-bounds Write

  CVE-2026-0461Oct 5, 2026AMD

  Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to overflow the DDR receive buffer into FSBL memory, potentially resulti

• 8.6 High severity

  Kria™ SOM: Improper Validation of Specified Quantity in Input

  CVE-2025-48507Nov 23, 2025AMD

  The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC.