CVE-2026-89172 PUBLISHED

Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms

Assigner: Microchip
Reserved: 11.09.2026 Published: 12.09.2026 Updated: 12.09.2026

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052.

This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.

CVSS Vector: CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
CVSS Score: 5.6

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Physical	Confidentiality	High	Confidentiality	High
Attack Complexity	High	Integrity	None	Integrity	None
Attack Requirements	Present	Availability	None	Availability	None
Privileges Required	None
User Interaction	None

CVSS 4.0

Vendor	Microchip
Product	AN1044
Versions	Default: unknown affected from 0 to A (incl.)

Vendor	Microchip
Product	AN953
Versions	Default: unknown affected from 0 to A (incl.)

Vendor	Microchip
Product	SW300052
Versions	Default: unknown affected from 0 to 2.6 (incl.)

None. Side-channel prevention is outside of intended use of product.