A vulnerability was found in Tink Tink-cc up to 2.1.2. It has been rated as problematic. Affected by this issue is the function
crypto::tink::JsonKeysetReader
. The manipulation leads to denial of service.
This vulnerability is handled as CVE-2024-4420. The attack can only be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.