CVE-2020-24455

Published February 26th, 2021

View on NVD ↗

CVSS v3

6.7

MEDIUM

CVSS v2

4.6

MEDIUM

Affected

PROJECT

Description

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.

tpm2-software/tpm2-tss

OSS implementation of the TCG TPM2 Software Stack (TSS2)

GitHub

885