← Database

CVE-2023-1018

MEDIUM CVSS: 5.5 Published: 2023-02-28 Modified: 2026-06-17

Description

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

Affected Platforms

Microsoft Windows Server 2016Microsoft Windows 11 21H2Microsoft Windows 10 21H2Microsoft Windows Server 2019Microsoft Windows 10 22H2Microsoft Windows 11 22H2Microsoft Windows Server 2022Microsoft Windows 10 1507Microsoft Windows 10 1809Microsoft Windows 10 20H2

Weakness Type

CWE-125

References