https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T08:56:16.079868+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-2884 CVE-2025-2884 — Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation 2026-10-02T08:56:16.080960+00:00

Affected: Trusted Computing Group TPM2.0, Siemens SIMATIC CN 4100, Siemens SIMATIC Field PG M5, Siemens SIMATIC Field PG M6, Siemens SIMATIC IPC BX-32A, Siemens SIMATIC IPC BX-39A, Siemens SIMATIC IPC BX-56A, Siemens SIMATIC IPC BX-59A, Siemens SIMATIC IPC MD-57A, Siemens SIMATIC IPC PX-32A and 15 more

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0