Description
OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles resets of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspecified vectors, aka internal bugs 27324690 and 27696681.
Advisories 1
- WID-SEC-2026-3995 Google Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 15, 2026