CVE-2023-22745

CVE-2023-22745 affects tpm2-tss: prior to versions 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2_RC_SetHandler and Tss2_RC_Decode index into layer_handler with an 8-bit layer number while the array has TPM2_ERROR_TSS2_RC_LAYER_COUNT entries, allowing a buffer overrun. This can read/write past the buffer ...

CVE-2020-24455

CVE-2020-24455 affects the TPM2 software stack (tpm2-tss) versions older than 3.0.1 and older than 2.4.3. The vulnerability is caused by missing initialization of a variable in the TPM2 source, which may allow a privileged user to escalate privileges via local access. Remediation per connected do...