CVE-2021-3746CWE-119

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers

published October 19, 2021

CVSS
—
EPSS
1%
Percentile
61.4
In the wild
Unconfirmed
What it is

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerability is to system availability. This issue affects libtpms versions before 0.8.5, before 0.7.9 and before 0.6.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00966 · 61.4th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2021-10-19T14:07Z
EPSS history
Timeline
  • 19 OCT 14:07Z
    A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers
    cvelistv5