1. Weak Volume Header key derivation algorithm 2. Sensitive information might be paged out from kernel stacks 3. Multiple issues in the bootloader decompressor 4. Windows kernel driver uses memset() to clear sensitive data 5. TC_IOCTL_GET_SYSTEM_DRIVE_DUMP_CONFIG kernel pointer disclosure 6. IOCTL_DISK_VERIFY integer overflow 7. TC_IOCTL_OPEN_TEST multiple issues 8. MainThreadProc() integer overflow 9. MountVolume() device check bypass 10. GetWipePassCount() / WipeBuffer() can cause BSOD 11. EncryptDataUnits() lacks error handling Read more: https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_Audit_Project_TrueCrypt_Security_Assessment.pdf