← Database

CVE-2021-38576

HIGH CVSS: 7.5 Published: 2022-01-03 Modified: 2026-06-17

Description

A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system.

Affected Platforms

Tianocore Edk2

Weakness Type

NVD-CWE-noinfo

References