Back to search
CVE-2023-1017
Published: Feb 28, 2023
Modified: Nov 4, 2025
PUBLISHED
Description
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
| Vendor | Product | Versions |
|---|---|---|
Trusted Computing Group | TPM2.0 | affected 1.59 |
Trusted Computing Group | TPM2.0 | affected 1.38 |
Trusted Computing Group | TPM2.0 | affected 1.19 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now