CVE catalog

CVE-2021-3746

libtpms: CVE-2021-3746

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: Aug 4, 2021, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.97% · Oct 25, 2026

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerability is to system availability. This issue affects libtpms versions before 0.8.5, before 0.7.9 and before 0.6.6.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libtpms	sid	`0.10.2-5`	fixed
Debian	libtpms	forky	`0.10.2-5`	fixed
Debian	libtpms	trixie	`0.9.2-3.2`	fixed
Debian	libtpms	bookworm	`0.9.2-3.1+deb12u1`	fixed
Debian	libtpms	bookworm-security	`0.9.2-3.1~deb12u1`	fixed
Suse	libtpms	linux enterprise micro 5.1	`0.8.2-3.3.1`	fixed
Opensuse	libtpms	leap 15.3	`0.8.2-3.3.1`	fixed
Suse	libtpms	linux enterprise module for server applications 15 sp3	`0.8.2-3.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libtpms	source	sid	`0.9.1-1`	not yet assigned	Not reported	Not reported
Debian	libtpms	source	forky	`0.9.1-1`	not yet assigned	Not reported	Not reported
Debian	libtpms	source	trixie	`0.9.1-1`	not yet assigned	Not reported	Not reported
Debian	libtpms	source	bookworm	`0.9.1-1`	not yet assigned	Not reported	Not reported
Suse	libtpms	rpm	linux enterprise micro 5.1	`0.8.2-3.3.1`	Not reported	SUSE-SU-2021:3004-2	Not reported
Opensuse	libtpms	rpm	leap 15.3	`0.8.2-3.3.1`	Not reported	OPENSUSE-SU-2021:3004-1	Not reported
Suse	libtpms	rpm	linux enterprise module for server applications 15 sp3	`0.8.2-3.3.1`	Not reported	SUSE-SU-2021:3004-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libtpms0]Fixed
Source package: [libtpms]
Details (4)
- 0.9.2-3.1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · bookworm; dsa · libtpms · debian · 12
- 0.9.2-3.1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · bookworm; dsa · libtpms · debian · 12
- 0.9.2-3.1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · bookworm; dsa · libtpms · debian · 12
- 0.9.2-3.1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · bookworm; dsa · libtpms · debian · 12
[libtpms-dev]Fixed
Source package: [libtpms]
Details (4)
- 0.9.2-3.1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · bookworm; dsa · libtpms · debian · 12
- 0.9.2-3.1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · bookworm; dsa · libtpms · debian · 12
- 0.9.2-3.1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · bookworm; dsa · libtpms · debian · 12
- 0.9.2-3.1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · bookworm; dsa · libtpms · debian · 12

[Debian 13 (Trixie)]

[libtpms0]Fixed
Source package: [libtpms]
Details (2)
- 0.9.2-3.2 · amd64 · trixie
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · 13
- 0.9.2-3.2 · arm64 · trixie
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · 13
[libtpms-dev]Fixed
Source package: [libtpms]
Details (2)
- 0.9.2-3.2 · amd64 · trixie
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · 13
- 0.9.2-3.2 · arm64 · trixie
  Fixed · Fixed: 0.9.1-1
  dsa · libtpms · debian · 13

Observed: Oct 23, 2026, 5:59:16 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]