CVE-2025-1122
MEDIUMGoogle ChromeOS 15753.50.0 - Out-of-bounds Write in TPM2 Reference Library via NV_Read
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-1122. PoCs published by FWNavy.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2025-1122, which leverages an out-of-bounds write in the TPM2 to disable Write-Protect on ChromiumOS devices. The exploit involves modifying the shim stateful partition and rootfs to deploy and execute the exploit binary.
Description
Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.
Exploits (1)
This repository contains a proof-of-concept exploit for CVE-2025-1122, which leverages an out-of-bounds write in the TPM2 to disable Write-Protect on ChromiumOS devices. The exploit involves modifying the shim stateful partition and rootfs to deploy and execute the exploit binary.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H