Improper Handling of Unicode Encoding

The product does not properly handle when an input contains Unicode encoding.

CVEs (41)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-8929 1Google 1Tink Java Jun 17, 2026 Oct 19, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a second ciphertext that can...Show more A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a second ciphertext that can decrypt to the same plaintext. This can be a problem with encrypting deterministic AEAD with a single key, and rely on a unique ciphertext-per-plaintext.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-8929

1Google

1Tink Java

Jun 17, 2026

Oct 19, 2020

N/A· v4

5.3 MEDIUM· v3

5.0 MEDIUM· v2

A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a second ciphertext that can decrypt to the same plaintext. This can be a problem with encrypting deterministic AEAD with a single key, and rely on a unique ciphertext-per-plaintext.Show less

Previous 1 23