EUVD-2026-56223
GHSA-fv5r-gp2c-7mwv
Severity by source
AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
PR:L better reflects 'privileged local attacker' requiring TPM interface access; I:L added because attestation forgery represents a concrete integrity impact on relying systems.
Primary rating from Vendor (certcc).
CVSS VectorVendor: certcc
Lifecycle Timeline
4DescriptionCVE.org
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.
AnalysisAI
RSA OAEP decryption in the TPM 2.0 specification leaks timing information sufficient for a local privileged attacker to recover plaintext from TPM-managed RSA key operations, including the Endorsement Key. Affected materials include import blobs, credential blobs, and session salts, and successful exploitation may additionally enable forgery of TPM 2.0 platform attestations - a high-value outcome for supply chain and hardware attestation threat actors. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must have local access to the TPM command interface with the ability to submit arbitrary RSA OAEP decryption commands and precisely measure response timing - on Linux this maps to read/write access to /dev/tpm0 or /dev/tpmrm0, and on Windows to access through the TPM Base Services API. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The published CVSS 3.1 score of 5.9 (Medium) may understate real-world impact given the cryptographic sensitivity of the targeted assets. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to apply TPM firmware updates issued by the specific TPM silicon vendor in response to TCG advisory TCGVRT0011; no single universal patched specification version exists, and each OEM or TPM chip manufacturer must release their own firmware fix - no vendor-specific patched version numbers are confirmed in available data at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-208 – Observable Timing Discrepancy
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today