Skip to content
OpenAdvisories
Medium USN-7617-1 1 CVE

libtpms vulnerability

Published Jul 3, 2025 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libtpms did not properly manage memory
when performing crafted cryptographic operations. An attacker could
possibly use this issue to cause a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS libtpms 0.9.3-0ubuntu1.22.04.2
Ubuntu · 24.04 LTS 24.04:LTS libtpms 0.9.3-0ubuntu4.24.04.1

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-49133

    Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

    Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bou…

    stefanberger libtpms libtpms libtpms Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2025-49133