CVE-2026-43606
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptographic keys.
Risk Assessment
Risk of exposure of private cryptographic keys, potentially leading to confidentiality and integrity compromise.
Recommendation
Update AMD Vitis Libraries and consider implementing countermeasures against side-channel attacks.
Original NVD description (English source)
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptographic keys.