ROS-20240611-02

The vulnerability of Tss2_RC_Decode and Tss2_RC_SetHandler functions of TCG TPM2 TPM2 Software Stack implementation is related to
buffer copying without input data validation. Exploitation of the vulnerability could allow an attacker to
gain access to sensitive data, violate its integrity, and cause a denial of service.

Vulnerability in TPM2_GENERATED_VALUE() functions of TCG TPM2 TPM2 Software Stack implementation is related to the lack of
checking if the magic number in the TPM2_GENERATED_VALUE certificate matches the magic number in the TPM2_GENERATED_VALUE certificate. Exploitation of the vulnerability
could allow an attacker to generate arbitrary quote data that cannot be detected by the
Fapi_VerifyQuote.