CVE-2025-2884

The TCG TPM2.0 Reference implementation contains an Out-of-Bounds read vulnerability in the CryptHmacSign helper function. This is caused by a lack of validation when checking the signature scheme against the signature key's algorithm. The flaw could allow an attacker to disclose protected inform...