VDB

GCVE-VVD-MAGEIA-2023-50

GCVE-VVD-MAGEIA-2023-50
Advisory Published
Vulnetix · Advisory published June 15, 2023
Tss2_RC_SetHandler and Tss2_RC_Decode both index into layer_handler with an 8 bit layer number, but the array only has TPM2_ERROR_TSS2_RC_LAYER_COUNT entries, so trying to add a handler for higher-numbered layers or decode a response code with such a layer number reads/writes past the end of the buffer. (CVE-2023-22745)

Affected Products

VendorProductVersionsPlatforms
Mageiagtk-gnutella0 (affected), 1.2.2-1.mga8 (unaffected)
Mageiatpm2-tss0 (affected), 3.2.2-1.mga8 (unaffected), 0 (affected), 3.2.2-1.mga8 (unaffected)

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›