stefanberger

Products

ProductCVEsExploitedLatest
libtpms2–Jan 2, 2026
swtpm1–Feb 18, 2022

Exploited and recent CVEs

  • CVE-2026-21444 Medium 5.5 libtpms returns wrong initialization vector when certain symmetric ciphers are used <0.1%
  • CVE-2025-49133 Medium 5.9 Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue 0.2%
  • CVE-2022-23645 Medium 6.2 Out-of-bounds read in swtpm 0.4%