← Database

CVE-2021-3623

MEDIUM CVSS: 6.1 Published: 2022-03-02 Modified: 2026-06-17

Description

A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability.

Affected Platforms

Libtpms Project LibtpmsFedoraproject FedoraRedhat Enterprise Linux

Weakness Type

CWE-787, CWE-787

References