Trustedcomputinggroup

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Trustedcomputinggroup product.

RSS Feeds for Trustedcomputinggroup security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Trustedcomputinggroup products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Trustedcomputinggroup Sorted by Most Security Vulnerabilities since 2018

Trustedcomputinggroup Trusted Platform Module4 vulnerabilities

Trustedcomputinggroup Trousers2 vulnerabilities

By the Year

In 2026 there have been 0 vulnerabilities in Trustedcomputinggroup. Trustedcomputinggroup did not have any published security vulnerabilities last year.

Year	Vulnerabilities	Average Score
2026	0	0.00
2025	0	0.00
2024	0	0.00
2023	2	5.50
2022	0	0.00
2021	0	0.00
2020	2	5.75
2019	0	0.00
2018	1	0.00

It may take a day or so for new Trustedcomputinggroup vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Trustedcomputinggroup Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2023-1017	Feb 28, 2023	TPM2.0 Module Lib OOB Write in CryptParameterDecryption (CVE-2023-1017) An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.	Trusted Platform Module
CVE-2023-1018	Feb 28, 2023	TPM2.0 Module Library OOB read in CryptParameterDecryption An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.	Trusted Platform Module
CVE-2020-26933	Nov 18, 2020	Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USE_DA_USED. Improper initialization of this shut-down may result in susceptibility to a dictionary attack.	Trusted Platform Module
CVE-2020-24332	Aug 13, 2020	An issue was discovered in TrouSerS through 0.3.14 An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks. The tss user can be used to create or corrupt existing files, which could possibly lead to a DoS attack.	Trousers
CVE-2018-6622	Aug 17, 2018	An issue was discovered An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation.	Trusted Platform Module
CVE-2012-0698	Nov 26, 2012	tcsd in TrouSerS before 0.3.10 tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_offset value in a TCP packet to port 30003.	Trousers