Read the docs
TI-2026-17328 Aliases CVE-2026-21444

libtpms returns wrong initialization vector when certain symmetric ciphers are used

Priority LOW 23CWE-327Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-327.

Summary

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0008 0th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed libtpms (stefanberger): 0.10.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
stefanbergerlibtpms0.10.0 to before 0.10.20.10.2Patch availableCNA
  • libtpms Vendorstefanberger Affected 0.10.0 to before 0.10.2 Fixed in 0.10.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:*0.10.0 to before 0.10.2VulnerableLibtpms Project
  • cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:* Versions 0.10.0 to before 0.10.2 Vulnerable ·Libtpms Project

Remediation

  • Fix · CNA libtpms (stefanberger) Fixed in 0.10.2

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Not affected: 3 products
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-21444

References

Exploit 1

Patch 2

  • TI-2021-02679 Memory corruption in libtpms CVSS 3.1MEDIUM 6.5
  • TI-2021-02569 Out-of-bounds write in libtpms CVSS 3.1MEDIUM 6.1
  • TI-2025-31213 Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue CVSS 3.1MEDIUM 5.9
  • TI-2021-02464 A flaw was found in libtpms in versions before 0.8.0. CVSS 3.1MEDIUM 5.5
  • TI-2021-02518 Buffer overflow in libtpms CVSS 3.1MEDIUM 5.5
  • TI-2021-02410 Broken or risky cryptographic algorithm in libtpms CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences