The vulnerability of the CryptHmacSign() function in the TCG TPM2 implementation of the TPM2 Software Stack lies in the reading of memory beyond the allocated buffer, which allows an attacker to compromise the protected information.

The vulnerability of the CryptHmacSign function in the TCG TPM2 implementation of the TPM2 Software Stack is related to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to disclose the protected information...