pentester.land· Mar 14, 2023· by Francisco Falcon (@fdfalcon)💰 Bounty: 20,000

Vulnerabilities in the TPM 2.0 reference implementation code

Open Original Article ↗
Target Program: Microsoft, VMware, Google, IBM, Lenovo, Qemu, Nuvoton, Trusted Computing Group, STMicroelectronics, Aruba Networks, CERT/CC, libtpms
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Memory corruption#Out-of-bounds Read#Out-of-bounds Write