CVE-2025-2884CWE-125

CVE-2025-2884

Medium · published June 10, 2025

CVSS v3.1
6.6
EPSS
0%
Percentile
16.3
In the wild
Unconfirmed
What it is

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00256 · 16.3th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-06-10T22:15Z
References (8)
https://github.com/stefanberger/libtpms/commit/04b2d8e9afc0a9b6bffe562a23e58c0de11532d1 · [email protected]https://trustedcomputinggroup.org/about/security/ · [email protected]https://trustedcomputinggroup.org/wp-content/uploads/TPM2.0-Library-Spec-v1.83-Errata_v1_pub.pdf · [email protected]https://trustedcomputinggroup.org/wp-content/uploads/VRT0009-Advisory-FINAL.pdf · [email protected]https://www.cve.org/CVERecord?id=CVE-2025-49133 · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01209.html · af854a3a-2127-422b-91ae-364da2661108https://www.kb.cert.org/vuls/id/282450 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-628843.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 10 JUN 17:29Z
    Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation
    cvelistv5