CVE-2026-43606CWE-208

CVE-2026-43606

published August 11, 2026

CVSS
7.7
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptographic keys.

The record
Technical detail
CVSS
7.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Weakness
CWE-208 · Observable Timing Discrepancy
Published
2026-08-11T21:17Z
References (1)
EPSS history
Timeline
  • 11 AUG 16:49Z
    Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing…
    cvelistv5