CVE-2021-3569: Libtpms Project Libtpms

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. This flaw could result in a SIGBUS (bad memory access) and termination of swtpm. The highest threat from this vulnerability is to system availability.

Affected products

• Libtpms Project Libtpms: before 0.7.2 (fixed in 0.7.2); from 0.7.3, before 0.8.0 (fixed in 0.8.0)
• Red Hat Enterprise Linux: version 8.0 only

Published 2021-06-03. Last modified 2026-06-17.