🟡 Medium | Source: GCP Compute Engine Security Bulletins
A vulnerability in TPM software (CVE-2025-2884) affects Google Cloud Shielded VMs that use virtual TPM (vTPM). An authenticated local attacker with vTPM interface access can send malformed commands to exploit an out-of-bounds memory read, potentially exposing sensitive vTPM data or disrupting vTPM availability. Google will patch affected systems automatically during scheduled maintenance windows, so no customer action is strictly required.
Security Architect’s Take: No immediate remediation is required as Google will patch automatically, but architects should proactively restrict vTPM interface access to root/administrative users only to reduce the attack surface — particularly on multi-tenant or shared workloads where broader user access may be granted.
Original advisory: GCP-2025-031