Read the docs

Tpm2 Software Stack Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Tpm2 Software Stack Project records in CISA KEV

No Tpm2 Software Stack Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tpm2 Software Stack 2 records MEDIUM

Records

2 records in Tpm2 Software Stack · all components

TI-2023-08918 CVE-2023-22745

Buffer Overlow in TSS2_RC_Decode in tpm2-tss

Priority MEDIUM 64

tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2).

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00537 Published 2023-01-19 Partial fix · 4.0.1, 3.2.2-rc0 CWE-120
TI-2020-14990 CVE-2020-24455 · GHSA-qh4p-3mhw-2cp7

Missing initialization of resource in TPM2 source

Priority LOW 30

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00584 Published 2021-02-26 No fix listed CWE-909
Open these records in search →