CVE-2020-24455

2021-02-2602:55:50

intel

www.cve.org

0.0004 Low

EPSS

Percentile

14.4%

JSON

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.

CNA Affected

[
  {
    "product": "TPM2 source",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before 3.01, before 2.4.3"
      }
    ]
  }
]