Medium severity5.9NVD Advisory· Published Nov 14, 2019· Updated Jun 17, 2026
CVE-2019-16863
CVE-2019-16863
Description
STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16cpe:2.3:o:st:st33tphf20i2c_firmware:74.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:st:st33tphf20i2c_firmware:74.5:*:*:*:*:*:*:*
- cpe:2.3:o:st:st33tphf20i2c_firmware:74.9:*:*:*:*:*:*:*
cpe:2.3:o:st:st33tphf20spi_firmware:74.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:st:st33tphf20spi_firmware:74.0:*:*:*:*:*:*:*
- cpe:2.3:o:st:st33tphf20spi_firmware:74.16:*:*:*:*:*:*:*
- cpe:2.3:o:st:st33tphf20spi_firmware:74.4:*:*:*:*:*:*:*
- cpe:2.3:o:st:st33tphf20spi_firmware:74.8:*:*:*:*:*:*:*
cpe:2.3:o:st:st33tphf2ei2c_firmware:73.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:st:st33tphf2ei2c_firmware:73.5:*:*:*:*:*:*:*
- cpe:2.3:o:st:st33tphf2ei2c_firmware:73.9:*:*:*:*:*:*:*
cpe:2.3:o:st:st33tphf2espi_firmware:71.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:st:st33tphf2espi_firmware:71.0:*:*:*:*:*:*:*
- cpe:2.3:o:st:st33tphf2espi_firmware:71.12:*:*:*:*:*:*:*
- cpe:2.3:o:st:st33tphf2espi_firmware:71.4:*:*:*:*:*:*:*
- cpe:2.3:o:st:st33tphf2espi_firmware:73.0:*:*:*:*:*:*:*
- cpe:2.3:o:st:st33tphf2espi_firmware:73.4:*:*:*:*:*:*:*
- cpe:2.3:o:st:st33tphf2espi_firmware:73.8:*:*:*:*:*:*:*
- STMicroelectronics/ST33TPHF2ESPI TPM devicesdescription
- Range: <2019-09-12
Patches
Vulnerability mechanics
References
6- tpm.failnvdThird Party Advisory
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV190024nvdThird Party Advisory
- support.hpe.com/hpsc/doc/public/displaynvdThird Party Advisory
- support.lenovo.com/us/en/product_security/LEN-29406nvdThird Party Advisory
- www.st.com/content/st_com/en/campaigns/tpm-update.htmlnvdVendor Advisory
- support.f5.com/csp/article/K32412503nvd
News mentions
0No linked articles in our index yet.