Security readout for executives and security teams
Plain-English summary
This is a TPM 2.0 out-of-bounds read that may expose sensitive TPM-held data to a local, low-privileged attacker. The score is medium because exploitation requires local access, but confidentiality impact is high if successful.
Executive priority
Treat this as a confidentiality risk requiring inventory and vendor follow-up, not an emergency internet-wide exposure. Prioritize systems where TPM-protected data is business-critical or where local user access is broadly available.
Technical view
CVE-2023-1018 is a CWE-125 out-of-bounds read in the TPM2.0 Module Library CryptParameterDecryption routine. The flaw permits a 2-byte read past the end of a TPM2.0 command. Affected TPM2.0 versions listed are 1.16, 1.38, and 1.59.
Likely exposure
Exposure is most likely where systems or components use TPM2.0 implementations based on affected Trusted Computing Group Module Library versions. The bundle does not identify specific hardware models, operating systems, or cloud services.
Exploitation context
The CVSS vector indicates local access, low complexity, low privileges, and no user interaction. CISA KEV status is false in the bundle, and no provided source states active exploitation.
Researcher notes
The source bundle gives the vulnerable routine, read size, access conditions, affected TCG versions, and CVSS vector. It does not provide exploit evidence, model-specific impact, or detailed patch identifiers, so validation depends on vendor mapping.
Mitigation direction
- Check TCG and CERT guidance for official errata, vendor fixes, and implementation-specific remediation.
- Inventory systems using TPM2.0 implementations tied to versions 1.16, 1.38, or 1.59.
- Prioritize firmware or supplier updates where the vendor confirms CVE-2023-1018 applicability.
- Limit local untrusted access on affected systems until remediation status is confirmed.
- Track vendor advisories because the bundle does not name a universal patch package.
Validation and detection
- Compare TPM implementation details against the affected TPM2.0 versions listed in the CVE bundle.
- Review supplier or platform advisories for explicit CVE-2023-1018 applicability.
- Confirm whether remediated firmware or TPM library updates are installed.
- Document systems where TPM stores sensitive keys or platform secrets.
- Record exceptions where vendor status is unavailable or not affected.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-125: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2023-1018 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N1.83.6Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
5.5MediumVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source materials
- CVE List V5 sourceCVE List V5
- TCG TPM2.0 Errata Version 1.4CVE reference
- TCG Security AdvisoriesCVE reference
- CERT/CC Advisory VU#782720CVE reference
- https://www.kb.cert.org/vuls/id/782720CVE reference
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Out-of-bounds Read
Out-of-bounds Read represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.