THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-15432 (MEDIUM 5.9) — When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information how many bytes of a given tag match the corre

[NVD] CVE-2026-15432 (MEDIUM 5.9) — When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information how many bytes of a given tag match the corre

lownvdPublished 2026-07-21

CVE-2026-15432 CVSS: 5.9 MEDIUM Published: 2026-07-21T17:17:04.563

When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information how many bytes of a given tag match the correct tag. This in turn could allow to find a correct t

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-15432