Not rated
CVE-2023-1017 An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of…
Description
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| TPM2.0 | 1.19 | No fix stated |
References
- TCG TPM2.0 Errata Version 1.4 trustedcomputinggroup.org
- TCG Security Advisories trustedcomputinggroup.org
- CERT/CC Advisory VU#782720 kb.cert.org
Timeline
- Published
- Last modified
Other CVEs of TPM2.0
The 5 CVEs of TPM2.0 →
CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker…
7.9
High
CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation
5.9
Medium
CVE-2025-2884
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the…
Not rated
CVE-2023-1018
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0…
5.5
Medium