CVE-2023-1018EPSS p91.8%
CVE-2023-1018CVE-2023-1018
trustedcomputinggroup / trusted_platform_module
Description
An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.
Scoring
| CVSS | 5.5 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| EPSS | 5.55% probability of exploitation · percentile 91.8% · 2026-06-19T12:03:05Z |
| Last modified | 2026-06-17 |