A vulnerability in the tdx_workload_attestation Rust crate allows a panic (denial of service) when processing a GCP launch endorsement that lacks TDX measurements. The issue occurs because the code reads a TDX measurement without verifying its presence, causing an index out of bounds panic. This flaw is fixed in version 0.2.0 by returning an error instead of panicking.