Skip to content
OpenAdvisories

Product · stefanberger

swtpm

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.2

    Out-of-bounds read in swtpm

    swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicato…