Description
OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspecified vectors, aka internal bug 27371173.
Advisories 1
- WID-SEC-2026-3995 Google Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 15, 2026