CVE-2025-59320

The CVE describes CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4 leaking TPM2.0 secrets by storing them in a serialized form in unused disk sectors. An unauthenticated attacker with physical access to the system disk can potentially recover this data and create an environment to unseal ...