Improper Protection of Physical Side Channels in Microchip Cryptographic Products
CVE-2026-89172

5.6MEDIUM

Key Information:

Vendor

Microchip

Status
An1044
An953
Sw300052
Vendor
CVE Published:
12 September 2026

What is CVE-2026-89172?

The vulnerability affects Microchip's AN1044, AN953, and SW300052 products due to improper protection of physical side channels. Attackers may exploit this weakness to potentially gain unauthorized access to sensitive information across these platforms. The issue arises from flaws in the implementation of cryptographic algorithms, leading to possible data leakage and reduced security integrity for applications relying on these components.

Affected Version(s)

AN1044 0

AN953 0

SW300052 0 <= 2.6

References

https://www.microchip.com/en-us/solutions/technologies/em...
vendor-advisory
https://www.microchip.com/en-us/application-notes/an1044
related
https://www.microchip.com/en-us/application-notes/an953
related

CVSS V4

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel WĂĽrsch
Institute of Computer Science, University of Tartu
.