A newly recorded vulnerability, tracked as CVE‑2025‑2884, exposes an out‑of‑bounds read in the Trusted Computing Group (TCG) TPM 2.0 reference implementation — specifically within the CryptHmacSign helper — and the flaw can allow sensitive memory contents or secrets to be leaked from affected...