EUVD-2026-56555
GHSA-cx8r-g3c8-jcfg
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local access with high complexity (requires sustained timing observation and statistical analysis); low privilege because a co-resident unprivileged process suffices; no availability impact.
Primary rating from Vendor (amd).
CVSS VectorVendor: amd
Lifecycle Timeline
2DescriptionCVE.org
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptographic keys.
AnalysisAI
Timing side-channel in AMD Vitis Libraries' ECDSA secp256k1 Security Module exposes private cryptographic keys to local attackers via statistical analysis of operation timing or electromagnetic emanations. Affected are versions prior to 2026.1 of the Vitis Libraries Security Module and Vitis Unified Installer for FPGAs and Adaptive SoCs on Windows. AMD has released version 2026.1 as the fix; no public exploit or active exploitation has been identified at time of analysis.
Technical ContextAI
CWE-208 (Observable Timing Discrepancy) identifies non-constant-time cryptographic operations. In ECDSA, the secp256k1 scalar multiplication - the core of private-key signing - must execute in constant time regardless of key bit values; any data-dependent branching or memory access pattern leaks information about the scalar (private key). AMD Vitis Libraries provide hardware-accelerated cryptographic primitives targeting FPGA and Adaptive SoC platforms (Xilinx/AMD devices) via the Vitis unified software platform. The affected component is the Security Module within Vitis Libraries. Timing attacks on ECDSA can, with sufficient signing observations, allow full private key recovery via lattice-based methods. Electromagnetic side-channel attacks are a physical variant that measures power or EM emissions rather than time. The secp256k1 curve is widely used in blockchain and cryptocurrency applications, making key exposure particularly high-impact.
RemediationAI
The primary fix is to upgrade to AMD Vitis Libraries Security Module version 2026.1 and Vitis Unified Installer version 2026.1, as documented in AMD security bulletin AMD-SB-8015 (https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8015.html). If immediate patching is not feasible, compensating controls should focus on restricting co-tenancy: prevent untrusted processes from running on the same host as any workload performing ECDSA secp256k1 signing, and where FPGA deployments are physically accessible, enforce strict physical access controls to mitigate electromagnetic side-channel observation. Rotating any private keys that were generated or used for signing operations on unpatched deployments is advisable, as past signing operations may have leaked key material. No additional workarounds are documented in the available references.
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.
An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.
An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.
An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.
An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. Rated criti
plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. Rated high severity (CVSS 8.8), this vu
AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of se
An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. Rated high
AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. Rated high severity (CVSS 7.8),
AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack. Rated high severity (CVSS 7.8),
A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5.sys. Rate
Same weakness CWE-208 – Observable Timing Discrepancy
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today