An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.

Threat-Mapped Scoring

Score: 1.9

Priority: P3 - Important (Medium)

• S9 – Sabotage of System/App
• S10 – Denial of Service (+0.1 bonus)

EPSS

Score: 0.00217
Percentile: 0.44343

CVSS Scoring

Mapped CWE(s)

• CWE-787 : Out-of-bounds Write

Affected Products

• cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.16:*:*:*:*:*:*
• cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.38:*:*:*:*:*:*
• cpe:2.3:a:trustedcomputinggroup:trusted_platform_module:2.0:revision_1.59:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*
• cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
• cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
• cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:x64:*
• cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*
• cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*
• cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*
• cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*
• cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*

← Back to Home