Trusted Computing Group vulnerabilities
5 vulnerabilities
Known vulnerabilities in Trusted Computing Group products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Tpm2.05 vulnerabilities
MediumCVE-2025-2884trusted computing group · tpm2.0Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementationTCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0EPSS0.26%MediumCVE-2026-6727debian · libtpms +2 moreCVE-2026-6727A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.EPSS0.15%HighCVE-2026-6726debian · libtpms +2 moreAn information leakage vulnerability in the TCG TPM 2.0 reference code.An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key. See also TCG VRT0010.EPSS0.19%HighCVE-2023-1017debian · libtpms +14 moreTPM2.0 vulnerable to out-of-bounds writeAn out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.EPSS1.29%MediumCVE-2023-1018debian · libtpms +14 moreTPM2.0 vulnerable to out-of-bounds readAn out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.EPSS5.55%