5.5
Moyenne
CVE-2023-1018 An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0…
Description
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| TPM2.0 | 1.16 | Pas de correctif indiqué |
Références
- TCG TPM2.0 Errata Version 1.4 trustedcomputinggroup.org
- TCG Security Advisories trustedcomputinggroup.org
- CERT/CC Advisory VU#782720 kb.cert.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de TPM2.0
Les 5 CVE de TPM2.0 →
CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker…
7.9
Élevée
CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation
5.9
Moyenne
CVE-2025-2884
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the…
Non notée
CVE-2023-1017
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of…
Non notée