Skip to content

Vulnerabilities of Trusted Computing Group TPM2.0

Is your version affected?

CVE Summary Score Published
CVE-2026-6726 An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker… 7.9 High Aug 11, 2026
CVE-2026-6727 A timing side-channel vulnerability exists in the RSA OAEP decryption implementation 5.9 Medium Aug 11, 2026
CVE-2025-2884 TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the… Not rated Jun 10, 2025
CVE-2023-1017 An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of… Not rated Feb 28, 2023
CVE-2023-1018 An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0… 5.5 Medium Feb 28, 2023