Out-Of-Bounds Write in TPM2 Reference Library on Google ChromeOS
CVE-2025-1122
6.7MEDIUM
What is CVE-2025-1122?
A vulnerability exists in the TPM2 Reference Library within Google ChromeOS, specifically affecting version 122.0.6261.132 on Cr50 Boards. This flaw allows attackers with root access to manipulate the NV_Read functionality during the Challenge-Response process, potentially leading to persistence on the system and evasion of operating system verification mechanisms. This could enable unauthorized actions and threaten the integrity of the operating system.
Affected Version(s)
ChromeOS 15753.50.0