Known vulnerabilities in libtpms

Vendor: Stefan Berger
Software: libtpms
Software CPE: cpe:2.3:a:stefanberger:libtpms:*:*:*:*:*:*:*:*
Website: https://github.com/stefanberger
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libtpms libtpms is affected by 8 known vulnerabilities: 1 high, 2 medium, 5 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120909 - Cryptographic Issues
CVE-2026-21444		 CWE-310 Low
No
No
 0.10.2 05.01.2026 SB2026010557
#VU113442 - Out-of-bounds read
CVE-2025-49133		 CWE-125 Low
No
No
 0.7.12, 0.8.10, 0.9.7, 0.10.1 30.07.2025 SB2025073028
SB2025073029
SB2025073030
and 24 more
#VU72707 - Out-of-bounds read
CVE-2023-1018		 CWE-125 Medium
No
No
 0.8.9, 0.9.6 02.03.2023 SB2023030207
SB2023030210
SB2023030758
and 17 more
#VU72706 - Out-of-bounds write
CVE-2023-1017		 CWE-787 High
No
No
 0.8.9, 0.9.6 02.03.2023 SB2023030207
SB2023030210
SB2023030758
and 16 more
#VU54504 - Out-of-bounds read
CVE-2021-3623		 CWE-125 Low
No
No
 0.6.5, 0.7.8, 0.8.4 01.07.2021 SB2021070128
SB2021070129
SB2022060240
and 2 more
#VU54503 - Stack-based buffer overflow
CVE-2021-3569		 CWE-121 Low
No
No
 0.7.2 01.07.2021 SB2021070127
#VU54502 - Insufficient Entropy
CVE-2021-3505		 CWE-331 Low
No
No
 0.8.0 01.07.2021 SB2021070126
SB2024030110
SB2022092385
and 1 more
#VU54501 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-3446		 CWE-327 Medium
No
No
 0.8.2 01.07.2021 SB2021070124
SB2021030134