How many CVEs does stefanberger libtpms have?

stefanberger libtpms has 8 published CVE records since 2021.

How many stefanberger libtpms CVEs are in CISA KEV?

None of stefanberger libtpms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for stefanberger libtpms vulnerabilities?

No stefanberger libtpms CVEs currently have a tracked public exploit in this dataset.

Which versions of stefanberger libtpms are affected?

51 distinct stefanberger libtpms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in stefanberger libtpms CVEs?

stefanberger libtpms's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-330 (Use of Insufficiently Random Values).

What is the average severity of stefanberger libtpms CVEs?

The average CVSS base score across stefanberger libtpms's scored CVEs is 5.9.

stefanberger libtpms Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every stefanberger libtpms version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.6.07 CVEs
0.7.07 CVEs
0.5.26 CVEs
0.5.2.16 CVEs
0.8.05 CVEs
0.10.03 CVEs
0.7.13 CVEs
0.8.13 CVEs
0.10.0-rc12 CVEs
0.6.12 CVEs
0.6.22 CVEs
0.6.32 CVEs
0.6.42 CVEs
0.7.22 CVEs
0.7.32 CVEs
0.7.42 CVEs
0.7.52 CVEs
0.7.62 CVEs
0.7.72 CVEs
0.8.22 CVEs
0.8.32 CVEs
0.9.02 CVEs
= 0.10.01 CVE
= 0.7.111 CVE
= 0.8.91 CVE
= 0.9.61 CVE
0.10.11 CVE
0.6.51 CVE
0.7.81 CVE
0.8.41 CVE

Version ranges

<= 8.05 CVEs
<= 332 CVEs
<= 342 CVEs
< 2e6173c1 CVE
< 2f30d621 CVE
< 7981d9a1 CVE
>= 0.10.0, < 0.10.21 CVE

Fixed in

04b2d8e9afc0a9b6bffe562a23e58c0de11532d12 CVEs
3fd4b94903061e156e64dc6a738237df2aebba092 CVEs
03ff2481e133540be3b3ffe3daa1483d2a73d9671 CVE
18ba4c0206cea9ea235056ec6fd06c6494d6ed141 CVE
24adfb75804f573c63f16b3065165754dddfb1f71 CVE
2e6173c1 CVE
2f30d621 CVE
3461a606f488bc6321f09b2b967688c158d2ce261 CVE
4893c23e3bb02560588150d3f11575c2916eb7591 CVE
729fc6a4ca61f5b5d9107ff417c72d183a9a62241 CVE
7325acb4777f70419fe10a1d9621c2666e977e731 CVE

Find a version

8 CVEs

Sort

libtpms returns wrong initialization vector when certain symmetric ciphers are used
CVE-2026-21444
Patch
CWE-330
Medium · CVSS 5.5
EPSS 0.1% (0th pct)2026-01-02
Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue
CVE-2025-49133
Patch
CWE-125
Medium · CVSS 5.9
EPSS 0.1% (3th pct)2025-06-10
Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation
CVE-2025-2884
Patch
CWE-125
Medium · CVSS 6.6
EPSS 0.2% (10th pct)2025-06-10
Medium vulnerability · 2022-03-02
CVE-2021-3623
Patch
CWE-787
Medium · CVSS 6.1
EPSS 0.3% (24th pct)2022-03-02
Medium vulnerability · 2021-10-19
CVE-2021-3746
Patch
CWE-119
Medium · CVSS 6.5
EPSS 0.9% (56th pct)2021-10-19
Medium vulnerability · 2021-06-03
CVE-2021-3569
Patch
CWE-120
Medium · CVSS 5.5
EPSS 0.3% (18th pct)2021-06-03
Medium vulnerability · 2021-04-19
CVE-2021-3505
Patch
CWE-331
Medium · CVSS 5.5
EPSS 0.4% (33th pct)2021-04-19
Medium vulnerability · 2021-03-25
CVE-2021-3446
Patch
CWE-327
Medium · CVSS 5.5
EPSS 0.1% (5th pct)2021-03-25

stefanberger libtpms Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other stefanberger products

Frequently asked questions

References

Track stefanberger libtpms vulnerabilities