Skip to content
Bouncycastle vulnerabilities
Newest
-
bouncycastle bc-java
MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender
CVE-2026-17507
Fix available
8.7 High
-
bouncycastle bc-csharp
Quadratic-time escaping when converting X.509 distinguished names to strings
CVE-2026-103604
8.7 High
-
bouncycastle bc-csharp
Unbounded HSS public key level count allows huge array allocation during signature verification
CVE-2026-103603
8.7 High
-
bouncycastle bc-csharp
Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts
CVE-2026-103602
8.2 High
-
bouncycastle bc-csharp
CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check
CVE-2026-103601
8.2 High
-
bouncycastle bc-csharp
Unbounded ASN.1 nesting depth causes process-terminating stack overflow
CVE-2026-103600
8.7 High
-
bouncycastle bc-csharp
Unbounded PBE iteration count when decrypting PKCS#8 private keys
CVE-2026-63578
7.1 High
-
bouncycastle bc-csharp
Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix
CVE-2026-63577
8.2 High
-
bouncycastle bc-csharp
URI name constraints checked against a mis-parsed host
CVE-2026-63576
8.2 High
-
bouncycastle bc-csharp
PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count
CVE-2026-63575
7.1 High
-
bouncycastle bc-csharp
Unbounded allocation from OpenPGP signature and user attribute subpacket lengths
CVE-2026-63574
8.7 High
-
bouncycastle bc-csharp
Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap
CVE-2026-63573
8.2 High
-
bouncycastle bc-csharp
Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files
CVE-2026-63572
7.1 High
-
bouncycastle bc-csharp
Attribute certificate path validation does not verify the attribute certificate's signature
CVE-2026-63571
8.7 High
-
bouncycastle bc-csharp
Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links
CVE-2026-63570
7.1 High
-
bouncycastle bc-csharp
MTI/A0 DHAgreement does not validate the peer's ephemeral value
CVE-2026-63569
9.1 Critical
-
bouncycastle bc-csharp
Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion
CVE-2026-63568
8.7 High
-
bouncycastle bc-csharp
IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)
CVE-2026-63567
8.2 High
-
bouncycastle bc-csharp
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
CVE-2026-63566
8.7 High
-
bouncycastle bc-csharp
IesEngine stream-mode MAC forgery via length-dependent KDF split
CVE-2026-16001
8.2 High
-
bouncycastle bc-csharp
KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used
CVE-2026-16000
8.7 High
-
bouncycastle bc-csharp
AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication
CVE-2026-15999
8.2 High
-
bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
CVE-2026-13586
Fix available
5.3 Medium
-
bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more
Lazy ASN.1 sequence forcing resets nesting-depth guard
CVE-2026-13506
Fix available
8.7 High
-
bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more
RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path
CVE-2026-12860
Fix available
8.7 High
-
bouncycastle bc-java
MLS wire decoder allocates attacker-declared opaque length before bounds check
CVE-2026-12852
Fix available
8.7 High
-
bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
OpenPGP AEAD decryption skips final tag on chunk-aligned data
CVE-2026-12817
Fix available
8.7 High
-
bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more
IESEngine stream-mode MAC forgery via length-dependent KDF split
CVE-2026-12816
Fix available
8.7 High
-
bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more
KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)
CVE-2026-12803
Fix available
8.7 High
-
bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
CMS AuthEnvelopedData fails to enforce tag-length on decryption
CVE-2026-12802
Fix available
8.7 High
-
bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +3 more +5 more
Possible OOM from unbounded up-front allocation on a definite-length read
CVE-2026-14682
Fix available
8.7 High
-
bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more
Quadratic-time escaping when stringifying X.500 distinguished names
CVE-2026-58059
Fix available
8.7 High
-
bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more
HSS public-key level count unbounded, enabling huge allocation on verify
CVE-2026-58060
Fix available
8.7 High
-
bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more
CCM-family modes write plaintext to caller buffer before tag check
CVE-2026-58061
Fix available
8.7 High
-
bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more
Stapled OCSP response accepted without binding to the checked certificate
CVE-2026-58062
Public exploitFix available
9.3 Critical
-
bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more
BCFKS keystore load honours unbounded KDF cost from untrusted file
CVE-2026-58063
Fix available
5.3 Medium
-
bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
CVE-2026-59638
Fix available
9.3 Critical
-
bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
CMS verifySignatures returns true for SignedData with zero signers
CVE-2026-59639
Fix available
8.7 High
-
bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
OpenPGP CFB quick-check oracle active on symmetric/session-key paths
CVE-2026-59640
Fix available
8.7 High
-
bouncycastle bcjmail-fips, bcmail-fips, bouncy castle for java lts +3 more +5 more
S/MIME validator trusts signer-asserted signingTime for path validation
CVE-2026-59641
Fix available
8.7 High
-
bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
CMS AuthenticatedData content not bound to MAC when authAttrs present
CVE-2026-59642
Fix available
8.7 High
-
bouncycastle bcpg-fips, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more
OpenPGP inline-signature policy failures silently ignored
CVE-2026-59643
Fix available
8.7 High
-
bouncycastle bc-java
MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
CVE-2026-59644
Fix available
8.7 High
-
bouncycastle bcutil-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
OER parser recurses without depth limit on self-referential IEEE 1609.2 schema
CVE-2026-59645
Fix available
8.7 High
-
bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
CVE-2026-59646
Fix available
8.7 High
-
bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
CRMF/CMP password-MAC honours unbounded iteration count
CVE-2026-59647
Fix available
6.9 Medium
-
bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
OpenPGP Argon2 S2K honours attacker-chosen memory and passes
CVE-2026-59648
Fix available
6.9 Medium
-
bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more
OpenPGP user-attribute subpacket length bounded only by JVM max memory
CVE-2026-59649
Fix available
8.7 High
-
bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more
MTI/A0 DH agreement exponentiates unvalidated peer value
CVE-2026-59650
Fix available
9.3 Critical
-
bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more
BKS keystore accepts legacy version with 16-bit integrity MAC key
CVE-2026-59651
Fix available
7.1 High
- Show olderLoading…