{"id":"CVE-2026-15432","summary":"Observable Timing Discrepancy in Tink-Java and Tink-Android ChunkedMacVerification","details":"When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information how many bytes of a given tag match the correct tag. This in turn could allow to find a correct tag bytewise.","modified":"2026-09-24T03:46:10.023968899Z","published":"2026-07-21T16:42:12.113Z","database_specific":{"cna_assigner":"Google","cwe_ids":["CWE-208"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15432.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15432.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15432"},{"type":"REPORT","url":"https://github.com/tink-crypto/tink-java/issues/75"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tink-crypto/tink-java","events":[{"introduced":"0"},{"last_affected":"0be571737dae79cccf9ba93b6da7a05ff70d7545"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:google:tink_java:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.21.0"}]}}],"versions":["v1.21.0","v1.20.0","v1.19.0","v1.18.0","v1.17.0","v1.16.0","v1.15.0","v1.14.0","v1.13.0","v1.12.0","v1.11.0","v1.8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15432.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}]}