Google Tink
2 CVEs affecting Google Tink. Latest disclosed: 2024-05-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4420 | High | 7.5 | 2024-05-21 | There exists a Denial of service vulnerability in Tink-cc in versions prior to 2.1.3. * An adversary can crash binaries using the crypto::tink::JsonKeysetRe… |
CVE-2020-8929 | Medium | 5.3 | 2020-10-19 | A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext… |