CWE-1283: Mutable Attestation or Measurement Reporting Data

The register contents used for attestation or measurement reporting data to verify boot flow are modifiable by an adversary.

3 tracked CVEs are classified under this weakness.

Highest-risk vulnerabilities

• CVE-2024-29038 — tpm2 does not detect if quote was not generated by TPM

Recently published

• CVE-2024-29038 — tpm2 does not detect if quote was not generated by TPM

Browse the full CVE database