CVE-2025-2884

Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation

State: Published
Severity: 6.6 Medium
Published: Jun 10, 2025
Updated: Oct 15, 2026
Reserved: Mar 27, 2025

Description

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0

Scores

CVSS	Score	Vector	Source
3.1	6.6 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
TPM2.0Trusted Computing Group	before 1.83Affected

References

https://trustedcomputinggroup.org/about/security/
TPM2.0 Errata
Vendor Advisory
Vendor Patch
Related CVE
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01209.html
https://www.kb.cert.org/vuls/id/282450
https://cert-portal.siemens.com/productcert/html/ssa-628843.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.