The vulnerability of the CryptHmacSign() function in the TCG TPM2 implementation of the TPM2 Software Stack lies in the reading of memory beyond the allocated buffer, which allows an attacker to compromise the protected information.

The vulnerability of the CryptHmacSign function in the TCG TPM2 implementation of the TPM2 Software Stack is related to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to disclose the protected information...

CVE-2025-2884

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0...

CVE-2025-49133

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds OOB read vulnerability. The...

CVE-2025-2884

The TCG TPM2.0 Reference implementation contains an Out-of-Bounds read vulnerability in the CryptHmacSign helper function. This is caused by a lack of validation when checking the signature scheme against the signature key's algorithm. The flaw could allow an attacker to disclose protected inform...