CyberRota Analysis
AI-GeneratedAn out-of-bounds read vulnerability in the SWTPM_NVRAM_CheckHeader() function can lead to a heap overread, potentially causing daemon termination and leaking sensitive heap data to logs. This issue arises from improper buffer length validation, affecting systems running swtpm. Organizations utilizing this software should prioritize patching to mitigate potential data exposure and service disruptions.
Original NVD Description
An out-of-bounds read vulnerability was found in swtpm's SWTPM_NVRAM_CheckHeader() function. The entry guard checks the buffer length against sizeof(bh), where bh is a pointer, instead of sizeof(*bh), the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overread on 64-bit systems (6 bytes on 32-bit) when accessing the totlen field. This may cause daemon termination on some platforms and leaks heap data to the log.