What is the CVSS score of EUVD-2025-17717?

EUVD-2025-17717 has a CVSS 3.1 base score of 6.6 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of TPM2.0 Reference Implementation are affected by EUVD-2025-17717?

CVE-2025-2884 presents notable security risk, a out-of-bounds read vulnerability rated CVSS 6.6. Exploitation could cause memory corruption or application crashes.. A patch is available.

How to fix or mitigate EUVD-2025-17717?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

TPM2.0 Reference Implementation EUVD-2025-17717

| CVE-2025-2884 MEDIUM

Out-of-bounds Read (CWE-125)

2025-06-10 cret@cert.org

Buffer Overflow Information Disclosure

6.6

CVSS 3.1 · Vendor: cert

Severity by source

Vendor (cert) PRIMARY

6.6 MEDIUM

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H

vuln.today AI

6.6 MEDIUM

Local attack vector, low complexity, low privileges, user interaction required.

3.1 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (cert).

CVSS VectorVendor: cert

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

Source Code Evidence Fetched

Jul 26, 2026 - 13:27 vuln.today

Patch available

Apr 16, 2026 - 05:29 EUVD

1.83

EUVD ID Assigned

Mar 14, 2026 - 19:49 euvd

EUVD-2025-17717

Analysis Generated

Mar 14, 2026 - 19:49 vuln.today

CVE Published

Jun 10, 2025 - 18:15 nvd

MEDIUM 6.6

DescriptionCVE.org

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0

AnalysisAI

Out-of-bounds read in TCG TPM2.0 Reference Implementation's CryptHmacSign function allows local authenticated attackers to leak sensitive memory or cause denial of service. The vulnerability affects TPM2.0 library versions prior to 1.83 and is fixed in Errata Revision 1.83. No public exploit or active exploitation has been identified, and EPSS score is low (0.03%).

Technical ContextAI

The vulnerability resides in the CryptHmacSign helper function within the TPM2.0 reference implementation's cryptographic library (CryptUtil.c). The function fails to validate that the signature scheme (sigAlg) matches the signing key's algorithm type (e.g., HMAC vs. asymmetric schemes). This allows an attacker to supply a mismatched signature scheme, leading to an out-of-bounds read (CWE-125) when the function attempts to process the signature using incorrect parameters. The affected component is the TPM2.0 software stack, commonly used in trusted computing environments. CPE data indicates affected versions are TPM2.0 < 1.83.

RemediationAI

Upgrade to TPM2.0 Errata Revision 1.83 or later. The fix is available in the libtpms repository commit 04b2d8e9afc0a9b6bffe562a23e58c0de11532d1. For systems using TPM2.0 software stacks, apply the vendor patch or update to the latest version. No workarounds are documented; however, restricting local access to TPM commands and ensuring only trusted users can interact with the TPM can reduce risk.