Bouncycastle Bc-csharp vulnerabilities

• bouncycastle bc-csharp Quadratic-time escaping when converting X.509 distinguished names to strings CVE-2026-103604 8.7 HighOctober 2, 2026
• bouncycastle bc-csharp Unbounded HSS public key level count allows huge array allocation during signature verification CVE-2026-103603 8.7 HighOctober 2, 2026
• bouncycastle bc-csharp Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts CVE-2026-103602 8.2 HighOctober 2, 2026
• bouncycastle bc-csharp CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check CVE-2026-103601 8.2 HighOctober 2, 2026
• bouncycastle bc-csharp Unbounded ASN.1 nesting depth causes process-terminating stack overflow CVE-2026-103600 8.7 HighOctober 2, 2026
• bouncycastle bc-csharp Unbounded PBE iteration count when decrypting PKCS#8 private keys CVE-2026-63578 7.1 HighOctober 2, 2026
• bouncycastle bc-csharp Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix CVE-2026-63577 8.2 HighOctober 2, 2026
• bouncycastle bc-csharp URI name constraints checked against a mis-parsed host CVE-2026-63576 8.2 HighOctober 2, 2026
• bouncycastle bc-csharp PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count CVE-2026-63575 7.1 HighOctober 2, 2026
• bouncycastle bc-csharp Unbounded allocation from OpenPGP signature and user attribute subpacket lengths CVE-2026-63574 8.7 HighOctober 2, 2026
• bouncycastle bc-csharp Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap CVE-2026-63573 8.2 HighOctober 2, 2026
• bouncycastle bc-csharp Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files CVE-2026-63572 7.1 HighOctober 2, 2026
• bouncycastle bc-csharp Attribute certificate path validation does not verify the attribute certificate's signature CVE-2026-63571 8.7 HighOctober 2, 2026
• bouncycastle bc-csharp Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links CVE-2026-63570 7.1 HighOctober 2, 2026
• bouncycastle bc-csharp MTI/A0 DHAgreement does not validate the peer's ephemeral value CVE-2026-63569 9.1 CriticalOctober 2, 2026
• bouncycastle bc-csharp Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion CVE-2026-63568 8.7 HighOctober 2, 2026
• bouncycastle bc-csharp IesEngine block-cipher mode checks padding before MAC (CBC padding oracle) CVE-2026-63567 8.2 HighOctober 2, 2026
• bouncycastle bc-csharp DTLS handshake reassembler allocates buffer from unchecked 24-bit length CVE-2026-63566 8.7 HighOctober 2, 2026
• bouncycastle bc-csharp IesEngine stream-mode MAC forgery via length-dependent KDF split CVE-2026-16001 8.2 HighOctober 2, 2026
• bouncycastle bc-csharp KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used CVE-2026-16000 8.7 HighOctober 2, 2026
• bouncycastle bc-csharp AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication CVE-2026-15999 8.2 HighOctober 2, 2026
• bouncycastle bc-csharp, bouncy castle fips .net api, fips java api +1 more +3 more Timing based private key exposure in Bouncy Castle CVE-2020-15522 Fix available 5.9 MediumMay 20, 2021