CVE-2023-1017

Name of the Vulnerable Software and Affected Versions TPM2.0 (affected versions not specified)

Description An out-of-bounds write vulnerability exists in TPM2.0's Module Library, allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. This can lead to denial of service, causing the TPM chip or process to crash or become unusable, and/or arbitrary code execution in the TPM context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.