Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2016-04-18	CVE-2016-2427	Information Exposure vulnerability in multiple products The AES-GCM specification in RFC 5084, as used in Android 5.x and 6.x, recommends 12 octets for the aes-ICVlen parameter field, which might make it easier for attackers to defeat a cryptographic protection mechanism and discover an authentication key via a crafted application, aka internal bug 26234568. local low complexity bouncycastle google CWE-200	5.5