CVE-2015-6644

bouncycastle: Information disclosure in GCMBlockCipher

Published Jan 6, 2016 CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Description
Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 24106146.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-893-1 bouncycastle security update
Debian DSA Debian DSA DSA-3829-1 bouncycastle security update
EUVD EUVD EUVD-2015-6582 Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 24106146.
Ubuntu USN Ubuntu USN USN-3727-1 Bouncy Castle vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
google_android
Published
Updated
Aug 6, 2024, 7:29 AM
Reserved
Aug 21, 2015, 12:00 AM
Status
Modified
Published
Jan 6, 2016, 7:59 PM
Modified
Jun 17, 2026, 12:31 AM
Severity
Moderate
Public date
Jan 1, 2016, 12:00 AM