New Vulnerabilities Found in TPM 2.0 Library

A pair of new vulnerabilities have been found within the TPM 2.0 Library by a cybersecurity company by the name of Quarkslab. These vulnerabilities have the potential to be a threat to billions of devices

What Are the Vulnerabilities?

These vulnerabilities involve the Trusted Platform Module, TPM for short, which is, ironically, used to improve the security of your PC and securely create and store cryptographic keys, to confirm that the operating system and firmware on your device are what they’re supposed to be and haven’t been tampered with. TPM is one of the requirements for Windows 11. According to QuarksLab two vulnerabilities CVE-2023-1017 and CVE-2023-1018 have been found in TPM 2.0 which concern an out-of-bounds-write and an out-of-bounds-read. These issues require the attacker to really know what they are doing for them to take advantage of these vulnerabilities.

What’s The Solution?

The Trusted Computing Group (TCG) which is behind the TPM standard have released an errata on how to address these vulnerabilities and noted that “these shortcomings are the result of a lack of necessary length checks, resulting in buffer overflows that could pave the way for local information disclosure or escalation of privileges.” TCG recommends that vendors should apply the updates to address the flaws, which for us means that we will likely see an update from major hardware vendors to address this issue shortly.

What do you think of this? Let us know in the comments.

Jakob Aylesbury

Disqus Comments Loading...

Recent Posts

MSI Announces BIOS Update for Ryzen 9000 Series Support

MSI has officially announced a significant BIOS update for their motherboards, gearing up for the…

5 hours ago

Leadership Failures Ruined Halo Infinite Campaign, Reports Suggest

Fans of the iconic Halo series have recently faced disappointment as reports surface regarding troubled…

5 hours ago

Fallout: New Vegas Gets Object-Based Audio With ATMOS Ambience Overhaul Mod

I'm a big fan of object-based audio formats, running a 5.1.2 surround system on my…

5 hours ago

Final Fantasy XIV Dawntrail Benchmark Tool Releases Today

Are you ready for the upcoming Final Fantasy XIV Dawntrail expansion? Well, how about your…

5 hours ago

New Dragons Dogma 2 Mod Adds Vital Feature Missing From The Game

Dragons Dogma 2 was one of the most disappointing releases of the year not because…

22 hours ago

Samsung Odyssey OLED 49″ Gaming MonitorSamsung

With a hair-raising 0.03ms response time on the 240Hz screen, react to your opponent's every…

24 hours ago