CVE Database
/

CVE-2025-1122

Back to search

CVE-2025-1122

Published: Apr 15, 2025

Modified: May 8, 2025

PUBLISHED

Description

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.

VendorProductVersions

Google

ChromeOS

affected
15753.50.0 - < 15753.50.0

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now