Veille CVE

Recherche « Google Tink-Android »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Google Tink-Android » ✕
  1. CVE-2026-15432 5.9 Moyenne

    Google Tink-Java · Google Tink-Android · Google tink java

    When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information how many bytes of a given tag match the correct tag. This in turn could allow to find a correct tag bytewise.