CVE-2014-5118: Improper Input Validation

Trusted Boot tboot before 1.8.2 has a 'loader.c' Security Bypass Vulnerability...

CVE-2017-16837: Improper Input Validation

Certain function pointers in Trusted Boot tboot through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module TPM by hooking these function pointers...