tpm2-software

Products

ProductCVEsExploitedLatest
tpm2-tools2–Jun 28, 2024
tpm2-tss2–Jun 28, 2024

Exploited and recent CVEs

  • CVE-2024-29040 Medium 4.3 Fapi Verify Quote: Does not detect if quote was not generated by TPM 0.3%
  • CVE-2024-29039 Critical 9.1 Missing check in tpm2_checkquote allows attackers to misrepresent the TPM state 1.0%
  • CVE-2024-29038 Medium 4.3 tpm2 does not detect if quote was not generated by TPM 0.4%
  • CVE-2023-22745 Medium 6.4 Buffer Overlow in TSS2_RC_Decode in tpm2-tss 0.5%