The Trusted Platform Module (TPM) 2.0 specification is affected by two buffer overflow vulnerabilities that could allow attackers to access or overwrite sensitive data, such as cryptographic keys.

Four researchers from the National Security Research Institute of South Korea have figured out (PDF) that there are some exploitable flaws in the Trusted Platform Module 2.0, which has been around ...