Skip to content
OpenAdvisories

Product · Google

Tink

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-4420

    Denial of Service in Tink-cc

    There exists a Denial of service vulnerability in Tink-cc in versions prior to 2.1.3.  * An adversary can crash binaries using the crypto::tink::JsonKeysetReader in tink-cc by providing an input that is not an encoded JSON object, but still a valid encoded JS…

    Google Tink Tink (Legacy)
  • Medium 5.3
    CVE-2020-8929

    Ciphertext integrity weakness in Tink

    A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a second ciphertext that can decrypt to the same plaintext. This ca…

    Google Tink tink com.google.crypto.tink:tink Maven PyPI