VDB
GCVE-110-MAGEIA-2024-171
GCVE-110-MAGEIA-2024-171
Advisory Published
A flaw was found in the tpm2-tss package, where there was no check that
the magic number in the attest is equal to the
TPM2_GENERATED_VALUE. This flaw allows an attacker to generate arbitrary
quote data, which may not be detected by Fapi_VerifyQuote.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | tpm2-tss | 0 (affected), 4.0.2-1.mga9 (unaffected) | — |
Browse GCVE Records
1,295 records in the GCVE database · Updated October 23, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.