USN-7617-1: libtpms vulnerability

It was discovered that libtpms did not properly manage memory when performing crafted cryptographic operations. An attacker could possibly use this issue to cause a denial of service...

Fedora 42 : libtpms (2025-77cdabc09b)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-77cdabc09b advisory. Upgrade to libtpms 0.10.1 fixing CVE-2025-49133 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2025-49133

A flaw was found in libtpms. A heap buffer overflow can occur in the tpmsparsepssh function when parsing a malformed Public Signature Key Exchange PSK structure. A local attacker can trigger this overflow by providing a crafted PSK structure to the library. This can lead to a denial of service or...

CVE-2025-49133 Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds OOB read vulnerability. The...

CVE-2025-49133

The CVE-2025-49133 entry affects libtpms, a TPM functionality library for virtual machines, with a flaw in CryptHmacSign that pairs signKey (ALG_KEYEDHASH) with inScheme (ECC/RSA) leading to an out-of-bounds read. The issue can be triggered by sending malicious TPM 2.0 commands to a vTPM (swtpm) ...

CVE-2025-49133 Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds OOB read vulnerability. The...

PT-2025-24927

Name of the Vulnerable Software and Affected Versions Libtpms versions prior to 0.7.12 Libtpms versions prior to 0.8.10 Libtpms versions prior to 0.9.7 Libtpms versions prior to 0.10.1 Description The issue is an out-of-bounds read vulnerability in the CryptHmacSign function. This occurs when the...

The vulnerability of the libtpms library arises from a transaction that occurs outside of the buffer in memory, allowing an attacker to trigger an emergency system shutdown or cause a service failure.

The vulnerability of the libtpms library arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a perpetrator to cause the system to terminate abnormally or trigger a service failure using a specially crafted TPM 2 package...

PT-2021-4274 · Libtpms · Libtpms

Name of the Vulnerable Software and Affected Versions: libtpms versions prior to 0.7.2 libtpms versions prior to 0.8.0 Description: A stack corruption bug was found in libtpms while decrypting data using RSA, which could result in a SIGBUS bad memory access and termination of swtpm. The highest...

PT-2021-20531 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: libtpms versions prior to 0.8.2 Description: A flaw in libtpms, specifically in its integration with OpenSSL, relates to the handling of the initialization vector IV when using certain symmetric ciphers. The issue causes the return of the...