CVE-2023-1017: falha em Trusted Computing Group TPM2.0
TPM2.0 vulnerable to out-of-bounds write
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.4%
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
Produtos afetados
Trusted Computing Group · TPM2.0CVEs relacionadas — Trusted Computing Group TPM2.0
No mesmo produto, das mais perigosas para as menos.
CVE-2023-1018MEDIUMTPM2.0 vulnerable to out-of-bounds read EPSS 5.6%CVE-2025-2884MEDIUMOut-of-Bounds read vulnerability in TCG TPM2.0 reference implementationEPSS 0.3%CVE-2026-6726HIGHAn information leakage vulnerability in the TCG TPM 2.0 reference code.EPSS 0.2%CVE-2026-6727MEDIUMCVE-2026-6727EPSS 0.2%