Vulnerabilities

TI-2026-17328 CVE-2026-21444

libtpms returns wrong initialization vector when certain symmetric ciphers are used

LOW 23

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0008 Published 2026-01-02 Fixed in 0.10.2 CWE-327

TI-2025-31213 CVE-2025-49133

LOW 26

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu.

CVSS 3.1MEDIUM 5.9 Local Low privileges User interaction EPSS 0.00191 Published 2025-06-10 Partial fix CWE-125

TI-2021-02569 CVE-2021-3623 · GHSA-6527-9qhc-39j4

LOW 27

A flaw was found in libtpms.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00321 Published 2022-03-02 No fix listed CWE-787

TI-2021-02679 CVE-2021-3746 · GHSA-9ffq-6fp7-34mv

LOW 31

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00966 Published 2021-10-19 No fix listed CWE-119

TI-2021-02518 CVE-2021-3569 · GHSA-ppc8-jm88-74j3

LOW 24

A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00259 Published 2021-06-03 Will not fix CWE-120

TI-2021-02464 CVE-2021-3505 · GHSA-239j-gmhr-4pcm

LOW 25

A flaw was found in libtpms in versions before 0.8.0.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00404 Published 2021-04-19 Fix deferred CWE-331

TI-2021-02410 CVE-2021-3446 · GHSA-3cfm-94xc-h7hp

LOW 24

A flaw was found in libtpms in versions before 0.8.2.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2021-03-25 No fix listed CWE-327