CVE-2026-43606: high-severity vulnerability in AMD Vitis™ Libraries - Security Module
Published · Updated
Follow this CVE+ Monitor Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows+ Monitor Vitis™ Libraries - Security Module
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.7epss 0.2%
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptographic keys.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
AMD · Vitis™ Libraries - Security ModuleAMD · Vitis™ Unified Installer for FPGAs & Adaptive SoCs in WindowsRelated CVEs — AMD Vitis™ Libraries - Security Module
In the same product, most dangerous first.