Tpm2-tools Project Tpm2-tools — known CVE vulnerabilities

Every CVE whose affected-product data names Tpm2-tools Project Tpm2-tools, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-29039 — CVSS 9.0 (critical): tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate…
• CVE-2021-3565 — CVSS 5.9 (medium): A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper…
• CVE-2024-29038 — CVSS 4.3 (medium): tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data…