CVE-2019-16863

CVE-2019-16863 affects STMicroelectronics ST33TPHF2ESPI TPM devices. The vulnerability stems from a side-channel timing flaw in ECDSA scalar multiplication, allowing an attacker to extract parts of the ECDSA private key. Impact is limited to affected TPM firmware prior to 2019-09-12; exploitation...