CVE-2021-3623CWE-787

A flaw was found in libtpms

published March 2, 2022

CVSS
—
EPSS
0%
Percentile
23.8
In the wild
Unconfirmed
What it is

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-03-02T22:02Z
EPSS history
Timeline
  • 02 MAR 22:02Z
    A flaw was found in libtpms
    cvelistv5