Skip to content
OpenAdvisories

Product · stefanberger

libtpms

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-21444

    libtpms returns wrong initialization vector when certain symmetric ciphers are used

    libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) …

    stefanberger libtpms libtpms Debian
  • Medium 5.9
    CVE-2025-49133

    Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

    Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bou…

    stefanberger libtpms libtpms libtpms Debian Ubuntu Azure Linux Alpine