Most recent entries from all

CVE-2023-1017 — TPM2.0 vulnerable to out-of-bounds write

2026-10-06T15:44:20.953554+00:00

Affected: Trusted Computing Group TPM2.0

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.

USN-5933-1 — libtpms vulnerabilities

2026-10-06T15:44:20.953612+00:00

Affected: Ubuntu:22.04:LTS: libtpms

Francisco Falcon discovered that Libtpms did not properly manage memory when performing certain cryptographic operations. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2023-1017, CVE-2023-1018)

It was discovered that Libtpms did not properly manage memory when handling certain commands. An attacker could possibly use this issue to cause a denial of service.