AMDCVE-2026-43606
AMD: timing side channel
High8.5CVE-2026-43606 · Published Aug 11, 2026 · updated Aug 12, 2026
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptographic keys.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
- CVSS 4.0
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-208
More AMD advisories
All AMD| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Aug 11 | AMD: privilege escalation | High7.0 | No fix yet |
| Aug 11 | AMD: untrusted search path | High7.0 | No fix yet |
| Aug 11 | AMD Ryzen Master Utility Driver: use after free | Medium5.6 | No fix yet |
| Aug 11 | AMD: code execution | Low1.0 | No fix yet |
| Aug 11 | AMD: code execution | Medium4.6 | No fix yet |
| Aug 11 | AMD: insecure default permissions | Low1.0 | No fix yet |