Orta CVSS 6.6
CVE-2025-2884: CVE-2025-2884: sınır dışı okuma
Açıklama (NVD)
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0
Özet bilgiler
- CVSS v3.1
- 6.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H - EPSS
- %0,26 (yüzdelik 17)
- CWE
- CWE-125
- Yama
- Yok / bilinmiyor