CVE-2017-16837: Trusted Boot Project Trusted Boot

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers.

Affected products

• Trusted Boot Project Trusted Boot: version 1.9.6 only

Published 2017-11-16. Last modified 2026-06-17.