Libtpms Project - vulnerabilities (CVEs)

7 CVEs in 1 products, 0 in the last 30 days, newest from 2026-01-02.

Products

CVE-2026-21444 - CVSS 5.5 (medium), 2026-01-02: libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of…
CVE-2025-49133 - CVSS 5.9 (medium), 2025-06-10: Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0…
CVE-2021-3623 - CVSS 6.1 (medium), 2022-03-02: A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds…
CVE-2021-3746 - CVSS 6.5 (medium), 2021-10-19: A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2…
CVE-2021-3569 - CVSS 5.5 (medium), 2021-06-03: A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. This flaw could result in a SIGBUS (bad…
CVE-2021-3505 - CVSS 5.5 (medium), 2021-04-19: A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit strength due to a bug in the TCG…
CVE-2021-3446 - CVSS 5.5 (medium), 2021-03-25: A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned…