Total vulnerabilities in the database
OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspecified vectors, aka internal bug 27371173.
Software | From | Fixed in |
---|---|---|
google / android | 6.0.1 | 6.0.1.x |
google / android | 6.0 | 6.0.x |