Tag: CVE-2023-1018

1 article

Vulnerabilities in the TPM 2.0 reference implementation code

Date Tue 14 March 2023
Author Francisco Falcon
Category Vulnerability

In this blog post we discuss the details of two vulnerabilities we discovered in the Trusted Platform Module (TPM) 2.0 reference implementation code. These two vulnerabilities, an out-of-bounds write (CVE-2023-1017) and an out-of-bounds read (CVE-2023-1018), affected several TPM 2.0 software implementations (such as the ones used by virtualization software) as well as a number of hardware TPMs.

Read article