CVE-2016-2462 in Android
摘要 (英语)
OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspecified vectors, aka internal bug 27371173.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
预定
2016-02-18
披露
2016-05-09
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 83121 | Google Android Conscrypt 权限提升 | 264 | 未定义 | 官方修复 | CVE-2016-2462 |