Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

Libtpms is a library that targets the integration of TPM functionality intohypervisors, primarily into Qemu. Libtpms, which is derived from the TPM2.0 reference implementation code published by the Trusted Computing Group,is prone to a potential out of bounds (OOB) read vulnerability. Thevulnerability occurs in the ‘CryptHmacSign’ function with an inconsistentpairing of the signKey and signScheme parameters, where the signKey isALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reportedvulnerability is in the ‘CryptHmacSign’ function, which is defined in the"Part 4: Supporting Routines – Code" document, section "7.151 -/tpm/src/crypt/CryptUtil.c ". This vulnerability can be triggered fromuser-mode applications by sending malicious commands to a TPM 2.0/vTPM(swtpm) whose firmware is based on an affected TCG referenceimplementation. The effect on libtpms is that it will cause an abort due tothe detection of the out-of-bounds access, thus for example making a vTPM(swtpm) unavailable to a VM. This vulnerability is fixed in 0.7.12, 0.8.10,0.9.7, and 0.10.1.

Where it's fixed