https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:13:43 +0000 https://vulnerability.circl.lu/vuln/cve-2024-29040 <p><strong>Affected:</strong> tpm2-software tpm2-tss, tpm2_software_stack_project tpm2_software_stack</p> <p>This repository hosts source code implementing the Trusted Computing Group&#39;s (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn&#39;t, or can use services it shouldn&#39;t be able to. This issue has been patched in version 4.1.0.</p> <p><strong>Affected:</strong> tpm2-software tpm2-tss, tpm2_software_stack_project tpm2_software_stack</p> <p>This repository hosts source code implementing the Trusted Computing Group&#39;s (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn&#39;t, or can use services it shouldn&#39;t be able to. This issue has been patched in version 4.1.0.</p> https://vulnerability.circl.lu/vuln/cve-2024-29040