⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2016-2462

HIGH · 7.0 CVSS Gepubliceerd: 09-05-2016 CWE-264

Beschrijving

OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspecified vectors, aka internal bug 27371173.

Vendors

Google

Affected products

Android

References

source.android.com
android.googlesource.com