Affected: Trusted Computing Group TPM2.0, Siemens SIMATIC CN 4100, Siemens SIMATIC Field PG M5, Siemens SIMATIC Field PG M6, Siemens SIMATIC IPC BX-32A, Siemens SIMATIC IPC BX-39A, Siemens SIMATIC IPC BX-56A, Siemens SIMATIC IPC BX-59A, Siemens SIMATIC IPC MD-57A, Siemens SIMATIC IPC PX-32A and 15 more

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0