https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 07:18:57 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-40693 <p>Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.</p> <p>Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.</p> https://db.gcve.eu/vuln/fkie_cve-2026-40693 https://db.gcve.eu/vuln/ghsa-gwf2-8595-qw97 <p>Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.</p> <p>Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.</p> https://db.gcve.eu/vuln/ghsa-gwf2-8595-qw97 https://db.gcve.eu/vuln/rustsec-2026-0480 <p><strong>Affected:</strong> crates.io: tdx_workload_attestation</p> <p>`GcpTdxHost::verify_launch_endorsement()`, available with the `host-gcp-tdx` feature, read `uefi_golden.tdx.measurements[0]` without checking that the golden measurement contains a TDX measurement. If a launch endorsement&#39;s golden measurement had no TDX measurements, the call panicked with an index out of bounds instead of returning an error.</p> <p>The panic is reached only after the endorsement&#39;s signing certificate and signature have been verified. Triggering it therefore requires a correctly signed endorsement that lacks TDX measurements.</p> <p>Intel describes the issue as improper input validation and classifies it as denial of service, with a CVSS 4.0 base score of 5.7, in INTEL-SA-01520.</p> <p>The flaw was corrected in [#87](https://github.com/IntelLabs/tdx-workload-attestation/pull/87), released in 0.2.0. The function now returns `Error::ParseError` when the TDX measurement structure is missing or empty.</p> <p>Reported by [Borys Tsyrulnikov](https://borystsyrulnikov.dev).</p> <p><strong>Affected:</strong> crates.io: tdx_workload_attestation</p> <p>`GcpTdxHost::verify_launch_endorsement()`, available with the `host-gcp-tdx` feature, read `uefi_golden.tdx.measurements[0]` without checking that the golden measurement contains a TDX measurement. If a launch endorsement&#39;s golden measurement had no TDX measurements, the call panicked with an index out of bounds instead of returning an error.</p> <p>The panic is reached only after the endorsement&#39;s signing certificate and signature have been verified. Triggering it therefore requires a correctly signed endorsement that lacks TDX measurements.</p> <p>Intel describes the issue as improper input validation and classifies it as denial of service, with a CVSS 4.0 base score of 5.7, in INTEL-SA-01520.</p> <p>The flaw was corrected in [#87](https://github.com/IntelLabs/tdx-workload-attestation/pull/87), released in 0.2.0. The function now returns `Error::ParseError` when the TDX measurement structure is missing or empty.</p> <p>Reported by [Borys Tsyrulnikov](https://borystsyrulnikov.dev).</p> https://db.gcve.eu/vuln/rustsec-2026-0480