Timing Discrepancy Vulnerability in AMD Vitis Libraries ECDSA secp256k1 Component
CVE-2026-43606

7.7HIGH

Key Information:

Vendor

Amd
Status
Vitis™ Libraries - Security Module
Vitis™ Unified Installer For Fpgas & Adaptive Socs In Windows
Vendor
CVE Published:
11 August 2026

What is CVE-2026-43606?

A timing discrepancy vulnerability exists in the ECDSA secp256k1 component of the AMD Vitis Libraries, which could enable local attackers to exploit the timing of operations. This flaw may lead to potential timing analysis or electromagnetic emanation attacks, ultimately compromising the confidentiality and integrity of sensitive cryptographic keys. Users are advised to review the security bulletin and apply necessary updates to safeguard against these risks.

Affected Version(s)

Vitis™ Libraries - Security Module 2026.1

Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows 2026.1

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.