CVE-2023-1017 TPM2.0 vulnerable to out-of-bounds write

High 7.8 Published 28 Feb 2023 Updated 4 Nov 2025

An out-of-bounds write in TPM2.0 allows attackers to cause denial of service or execute arbitrary code within the TPM context.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2023-1017?

CVE-2023-1017 is a high-severity memory corruption vulnerability in Microsoft Windows 10 1507, published on 28 Feb 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.

Weakness: CWE-787

Which versions are affected by CVE-2023-1017?

It affects 12 products.

Products include Microsoft Windows 10 1507, Microsoft Windows 10 1607, Microsoft Windows 10 1809, Microsoft Windows 10 20h2, Microsoft Windows 10 21h2, Microsoft Windows 10 22h2 and 6 more.

How do I fix CVE-2023-1017?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2023-1017 being exploited?

There is no known exploitation of CVE-2023-1017 in the wild and no public exploit code.

All Microsoft Windows 10 1507 vulnerabilities

Sources

Also known as DEBIAN-CVE-2023-1017, GHSA-c6qh-28m2-rfvf, UBUNTU-CVE-2023-1017.