CVE-2026-21444

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-21444", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2025-12-29T03:00:29.276Z", "datePublished": "2026-01-02T19:05:31.503Z", "dateUpdated": "2026-01-05T20:37:42.203Z"}, "containers": {"cna": {"title": "libtpms returns wrong initialization vector when certain symmetric ciphers are used", "problemTypes": [{"descriptions": [{"cweId": "CWE-327", "lang": "en", "description": "CWE-327: Use of a Broken or Risky Cryptographic Algorithm", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-330", "lang": "en", "description": "CWE-330: Use of Insufficiently Random Values", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/stefanberger/libtpms/security/advisories/GHSA-7jxr-4j3g-p34f", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/stefanberger/libtpms/security/advisories/GHSA-7jxr-4j3g-p34f"}, {"name": "https://github.com/stefanberger/libtpms/issues/541", "tags": ["x_refsource_MISC"], "url": "https://github.com/stefanberger/libtpms/issues/541"}, {"name": "https://github.com/stefanberger/libtpms/commit/33c9ff074cb16c1841ce7d7f33643c17c426743a", "tags": ["x_refsource_MISC"], "url": "https://github.com/stefanberger/libtpms/commit/33c9ff074cb16c1841ce7d7f33643c17c426743a"}], "affected": [{"vendor": "stefanberger", "product": "libtpms", "versions": [{"version": ">= 0.10.0, < 0.10.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-02T19:05:31.503Z"}, "descriptions": [{"lang": "en", "value": "libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available."}], "source": {"advisory": "GHSA-7jxr-4j3g-p34f", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-05T20:30:19.842839Z", "id": "CVE-2026-21444", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-05T20:37:42.203Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21444", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-05T20:30:19.842839Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-05T20:30:20.466Z"}}], "cna": {"title": "libtpms returns wrong initialization vector when certain symmetric ciphers are used", "source": {"advisory": "GHSA-7jxr-4j3g-p34f", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "stefanberger", "product": "libtpms", "versions": [{"status": "affected", "version": ">= 0.10.0, < 0.10.2"}]}], "references": [{"url": "https://github.com/stefanberger/libtpms/security/advisories/GHSA-7jxr-4j3g-p34f", "name": "https://github.com/stefanberger/libtpms/security/advisories/GHSA-7jxr-4j3g-p34f", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/stefanberger/libtpms/issues/541", "name": "https://github.com/stefanberger/libtpms/issues/541", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/stefanberger/libtpms/commit/33c9ff074cb16c1841ce7d7f33643c17c426743a", "name": "https://github.com/stefanberger/libtpms/commit/33c9ff074cb16c1841ce7d7f33643c17c426743a", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-327", "description": "CWE-327: Use of a Broken or Risky Cryptographic Algorithm"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-330", "description": "CWE-330: Use of Insufficiently Random Values"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-02T19:05:31.503Z"}}}, "cveMetadata": {"cveId": "CVE-2026-21444", "state": "PUBLISHED", "dateUpdated": "2026-01-05T20:37:42.203Z", "dateReserved": "2025-12-29T03:00:29.276Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-01-02T19:05:31.503Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "libtpms", "vendor": "stefanberger", "versions": [{"status": "affected", "version": ">= 0.10.0, < 0.10.2"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:*", "matchCriteriaId": "E714F6E7-EE9D-46ED-B5CF-52EDC67277A8", "versionEndExcluding": "0.10.2", "versionStartIncluding": "0.10.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available."}, {"lang": "es", "value": "libtpms, una biblioteca que proporciona emulaci\u00f3n de software de un M\u00f3dulo de Plataforma Confiable, tiene un fallo en las versiones 0.10.0 y 0.10.1. La integraci\u00f3n com\u00fanmente utilizada de libtpms con OpenSSL 3.x conten\u00eda una vulnerabilidad relacionada con el IV (vector de inicializaci\u00f3n) devuelto cuando se utilizaban ciertos cifrados sim\u00e9tricos. En lugar de devolver el \u00faltimo IV, devolv\u00eda el IV inicial al llamador, debilitando as\u00ed los pasos subsiguientes de cifrado y descifrado. La mayor amenaza de esta vulnerabilidad es para la confidencialidad de los datos. La versi\u00f3n 0.10.2 corrige el problema. No se conocen soluciones alternativas disponibles."}], "id": "CVE-2026-21444", "lastModified": "2026-06-17T10:18:40.993", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-21444", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-05T20:30:19.842839Z", "version": "2.0.3"}}]}, "published": "2026-01-02T19:15:48.763", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/stefanberger/libtpms/commit/33c9ff074cb16c1841ce7d7f33643c17c426743a"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Issue Tracking"], "url": "https://github.com/stefanberger/libtpms/issues/541"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://github.com/stefanberger/libtpms/security/advisories/GHSA-7jxr-4j3g-p34f"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-327"}, {"lang": "en", "value": "CWE-330"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "limtpms: libtpms: Remote data confidentiality compromise via incorrect Initialization Vector (IV) handling", "id": "2426858", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2426858"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "(CWE-327|CWE-330)", "details": ["No description is available for this CVE."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-21444", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "libtpms", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "virt:rhel/libtpms", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "libtpms", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-01-02T19:05:31Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-21444\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-21444\nhttps://github.com/stefanberger/libtpms/commit/33c9ff074cb16c1841ce7d7f33643c17c426743a\nhttps://github.com/stefanberger/libtpms/issues/541\nhttps://github.com/stefanberger/libtpms/security/advisories/GHSA-7jxr-4j3g-p34f"], "threat_severity": "Moderate"}

{"analysis": {"en": {"generated_at": "2026-04-18T08:31:06.486548+00:00", "value": {"mitigation_remediation": ["Update libtpms to version 0.10.2 or later", "Rebuild or reconfigure any applications that link against libtpms so that they use the updated library version", "Review cryptographic logs or use diagnostic tools to confirm that IVs are being correctly returned and applied"], "summary": {"action": "Patch", "impact": "Data Confidentiality"}, "threat_synthesis": {"affected_systems": "Affected versions are libtpms 0.10.0 and 0.10.1. The library is provided by stefanberger under the libtpms project and is commonly integrated with OpenSSL 3.x. Version 0.10.2 and later contain a fix that restores correct IV handling. No other product versions are listed as affected.", "description_and_impact": "The vulnerability in libtpms causes the library to return the initial initialization vector instead of the updated one when certain symmetric ciphers are used, thereby weakening the cryptographic strength of subsequent encryption and decryption operations. This flaw is a cryptographic weakness that undermines data confidentiality, making encrypted data more susceptible to decryption by an attacker. It is rooted in the improper handling of IVs and the use of a weak cryptographic algorithm, as indicated by the associated CWE identifiers.", "risk_and_exploitability": "The CVSS vector indicates a medium severity (5.5). The EPSS score is below 1%, implying a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Attackers would need to operate in an environment where libtpms is used for encryption, and success would primarily compromise data confidentiality rather than achieving remote code execution or denial of service."}}}}, "created": "2026-04-18T08:45:41.391003+00:00", "updated": "2026-04-18T08:45:41.391030+00:00", "vendors": []}