AMD Patches High-Risk Vitis Flaws Threatening Private Keys

AMD’s Vitis software platform is used to develop applications for the chipmaker’s FPGAs and adaptive computing products, making vulnerabilities in the toolchain potentially significant for enterprise and embedded systems. The most sensitive issue affects an ECDSA secp256k1 component, where exposure of a cryptographic private key could undermine digital signatures, authentication and protected data. Separate flaws that enable arbitrary code execution could give attackers broader control of affected systems.

AMD disclosed and patched multiple high-risk vulnerabilities in Vitis, Ryzen Master and its PDM tools in an August product security bulletin. The Vitis issues include the potential disclosure of ECDSA secp256k1 private keys and arbitrary code execution, according to the company’s advisory. AMD urged customers and administrators to identify affected installations and upgrade promptly to the corrected releases, reducing the risk of credential exposure and system compromise.