CVE-2023-1018 — TPM2.0 vulnerable to out-of-bounds read
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacke…
Published: 2023-02-28 · CVSS: 5.5 · CVSS 3.1
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7