Aller au contenu
en Se connecter
7.9 Élevée

CVE-2026-6726 An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker…

Description

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key. See also TCG VRT0010.

Produits et versions touchés

Produit Versions touchées Corrigé en
TPM2.0 184 premières → 184 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de TPM2.0

Les 5 CVE de TPM2.0 →
CVE-2026-6727 A timing side-channel vulnerability exists in the RSA OAEP decryption implementation 5.9 Moyenne CVE-2025-2884 TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the… Non notée CVE-2023-1017 An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of… Non notée CVE-2023-1018 An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0… 5.5 Moyenne
Suivre cette CVE