stefanberger vulnerabilities

Products

• libtpms 2
• swtpm 1

Latest stefanberger CVEs

Newest publication first

1. CVE-2026-21444 libtpms returns wrong initialization vector when certain symmetric ciphers are used

   Published 2026-01-02

   Medium·CVSS 5.5 EPSS 0.08%

   libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetri...

2. CVE-2025-49133 Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

   Published 2025-06-10

   Medium·CVSS 5.5 EPSS 0.19%

   Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds (OOB) read vulner...

3. CVE-2022-23645 Out-of-bounds read in swtpm

   Published 2022-02-18

   Medium·CVSS 5.5 EPSS 0.40%

   swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicator has an invalid valu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.