Vulnerabilities in the TPM 2.0 reference implementation code

Published

2023-03-13 23:00

Collected

2026-07-08 12:23

---
id: 4409
title: "Vulnerabilities in the TPM 2.0 reference implementation code"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/vulnerabilities-in-the-tpm-20-reference-implementation-code.html"
published_at: "2023-03-13T23:00:00Z"
tags: ["virtualization", "vulnerability", "tpm", "cve-2023-1017", "cve-2023-1018", "trusted-computing"]
phying_url: "https://phying.com/item/4409"
lang: en
---

# Vulnerabilities in the TPM 2.0 reference implementation code

## Summary

Two flaws in the TPM 2.0 reference code — an out-of-bounds write (CVE-2023-1017) and read (CVE-2023-1018) — triggerable via malicious TPM commands, affecting virtual and hardware TPMs.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2023-03-13T23:00:00Z
- **Original:** https://blog.quarkslab.com/vulnerabilities-in-the-tpm-20-reference-implementation-code.html
- **Phying News:** https://phying.com/item/4409