Filtered by vendor Google
Subscriptions
Filtered by product Tink Android
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-15432 | 1 Google | 2 Tink Android, Tink Java | 2026-07-27 | N/A |
| When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information how many bytes of a given tag match the correct tag. This in turn could allow to find a correct tag bytewise. | ||||
Page 1 of 1.