CVE-2026-15432

Name of the Vulnerable Software and Affected Versions Tink (affected versions not specified)

Description The ChunkedMacVerification object performs tag verification using a non-constant time comparison. This creates a timing side channel, which is a vulnerability where the time taken to execute an operation varies based on the input, potentially allowing an attacker to determine how many bytes of a provided tag match the correct tag and eventually discover the full tag byte by byte.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.