CVE-2023-1018 (Security advisory): An out-of-bounds read vulnerability in TPM2.0

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

For more information on this vulnerability please visit: https://nvd.nist.gov/vuln/detail/CVE-2023-1018

CVSS3 : 5.5

Product	Package	Status
Lighthouse	-	Not impacted
OM1200 OM2200 CM8100	TPM2	Not impacted https://www.st.com/resource/en/technical_note/tn1460-stsafetpm-assessment-of-vulnerability-vu782720-stmicroelectronics.pdf
Classic Console IM7200  CM7100  ACM7000	-	Not impacted