Tink (Legacy) vulnerabilities

1 known vulnerability in Tink (Legacy) from Google. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Tink: Improper Encoding or Escaping of Output

  CVE-2024-4420May 21, 2024Google

  There exists a Denial of service vulnerability in Tink-cc in versions prior to 2.1.3. * An adversary can crash binaries using the crypto::tink::JsonKeysetReader in tink-cc by providing an input that is not an encoded JSON object, but still a valid encoded JSON