Vulnerabilities > Google > GO Attestation > 0.2.2

DATE CVE VULNERABILITY TITLE RISK
2022-02-04 CVE-2022-0317 Improper Input Validation vulnerability in Google Go-Attestation
An improper input validation vulnerability in go-attestation before 0.3.3 allows local users to provide a maliciously-formed Quote over no/some PCRs, causing AKPublic.Verify to succeed despite the inconsistency.
local
low complexity
google CWE-20
2.1