Non notée
CVE-2023-1017 An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of…
Description
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| TPM2.0 | 1.19 | Pas de correctif indiqué |
Autres CVE de TPM2.0
Les 5 CVE de TPM2.0 →
CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker…
7.9
Élevée
CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation
5.9
Moyenne
CVE-2025-2884
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the…
Non notée
CVE-2023-1018
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0…
5.5
Moyenne