{"id":"CVE-2026-21444","aliases":["DEBIAN-CVE-2026-21444","EUVD-2026-0753","GHSA-7jxr-4j3g-p34f","SUSE-SU-2026:21571-1","SUSE-SU-2026:21581-1","UBUNTU-CVE-2026-21444","openSUSE-SU-2026:10422-1","openSUSE-SU-2026:20695-1"],"status":"published","title":"libtpms returns wrong initialization vector when certain symmetric ciphers are used","description":"libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0008,"percentile":0.00151,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-327","CWE-330"],"published":"2026-01-02T19:05:31Z","modified":"2026-10-28T10:50:35Z","fixes":[{"ecosystem":"Debian:14","package":"libtpms","fixed_in":["0.10.2-1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libtpms","fixed_in":["0.10.2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:14","package":"libtpms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-1"}]}],"versions":["0.10.1-1","0.10.1-2","0.9.2-3.2","0.9.2-3.2+hurd.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libtpms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2-1.1"}]}]}],"products":[{"vendor":"libtpms_project","product":"libtpms"},{"vendor":"stefanberger","product":"libtpms"}],"references":[{"url":"https://github.com/stefanberger/libtpms/security/advisories/GHSA-7jxr-4j3g-p34f","tags":["x_refsource_CONFIRM","Patch","Vendor Advisory","advisory","report"]},{"url":"https://github.com/stefanberger/libtpms/issues/541","tags":["x_refsource_MISC","Exploit","Issue Tracking","report"]},{"url":"https://github.com/stefanberger/libtpms/commit/33c9ff074cb16c1841ce7d7f33643c17c426743a","tags":["x_refsource_MISC","Patch","fix","report"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21444.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21444","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-21444","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621571-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244528","tags":["report"]},{"url":"https://bugzilla.suse.com/1260439","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21444","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621581-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-21444","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-21444","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-21444","title":"libtpms returns wrong initialization vector when certain symmetric ciphers are used","description":"libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.","status":"published","published":"2026-01-02T19:05:31.503Z","modified":"2026-01-05T20:37:42.203Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-327","CWE-330"],"updated_at":"2026-11-02T13:41:42.05254Z"}],"euvd":[{"id":"EUVD-2026-0753","description":"libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.","status":"published","published":"2026-01-02T19:05:31Z","modified":"2026-01-05T20:37:42Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:48:55.889439Z"}],"nvd":[{"id":"CVE-2026-21444","description":"libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.","status":"published","published":"2026-01-02T19:15:48.763Z","modified":"2026-06-17T10:18:40.993Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-327","CWE-330"],"updated_at":"2026-11-02T14:12:03.683495Z"}],"osv":[{"id":"CVE-2026-21444","title":"libtpms returns wrong initialization vector when certain symmetric ciphers are used","description":"libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.","status":"published","published":"2026-01-02T19:05:31.503Z","modified":"2026-10-28T10:50:35.497049529Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-327","CWE-330"],"updated_at":"2026-11-02T15:44:58.42038Z"},{"id":"DEBIAN-CVE-2026-21444","description":"libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.","status":"published","published":"2026-01-02T19:15:48.763Z","modified":"2026-10-01T03:03:20.670743373Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:53.097669Z"},{"id":"UBUNTU-CVE-2026-21444","description":"libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available.","status":"withdrawn","published":"2026-01-05T00:00:00Z","modified":"2026-01-06T08:49:09.812095Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"openSUSE-SU-2026:10422-1","title":"libtpms-devel-0.10.2-1.1 on GA media","description":"These are all security issues fixed in the libtpms-devel-0.10.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-25T00:00:00Z","modified":"2026-03-26T09:02:43.321761Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20695-1","title":"Security update for libtpms","description":"This update for libtpms fixes the following issues:\n\n- CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528).\n- CVE-2026-21444: Fixed remote data confidentiality compromise via incorrect Initialization Vector (IV) handling\n  (bsc#1260439).\n","status":"published","published":"2026-05-06T18:19:25Z","modified":"2026-05-09T18:24:53.318159Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:21571-1","title":"Security update for libtpms","description":"This update for libtpms fixes the following issues:\n\n- CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528).\n- CVE-2026-21444: Fixed remote data confidentiality compromise via incorrect Initialization Vector (IV) handling\n  (bsc#1260439).\n","status":"published","published":"2026-05-06T18:18:33Z","modified":"2026-05-12T18:23:48.563353Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21581-1","title":"Security update for libtpms","description":"This update for libtpms fixes the following issues:\n\n- CVE-2025-49133: Fixed potential out of bounds (OOB) read vulnerability (bsc#1244528).\n- CVE-2026-21444: Fixed remote data confidentiality compromise via incorrect Initialization Vector (IV) handling\n  (bsc#1260439).\n","status":"published","published":"2026-05-06T18:18:33Z","modified":"2026-05-16T18:24:21.085315Z","updated_at":"2026-11-02T15:54:02.312556Z"}]}}