Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2025-1122

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ChromeOS

Description

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google ChromeOS

  • 15753.50.0 to < 15753.50.0affected

References