Bouncycastle Bouncy Castle For Java vulnerabilities

• bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) CVE-2026-13586 Fix available 5.3 MediumAugust 3, 2026
• bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more Lazy ASN.1 sequence forcing resets nesting-depth guard CVE-2026-13506 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path CVE-2026-12860 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more OpenPGP AEAD decryption skips final tag on chunk-aligned data CVE-2026-12817 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more IESEngine stream-mode MAC forgery via length-dependent KDF split CVE-2026-12816 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) CVE-2026-12803 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more CMS AuthEnvelopedData fails to enforce tag-length on decryption CVE-2026-12802 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +3 more +5 more Possible OOM from unbounded up-front allocation on a definite-length read CVE-2026-14682 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more Quadratic-time escaping when stringifying X.500 distinguished names CVE-2026-58059 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more HSS public-key level count unbounded, enabling huge allocation on verify CVE-2026-58060 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more CCM-family modes write plaintext to caller buffer before tag check CVE-2026-58061 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more Stapled OCSP response accepted without binding to the checked certificate CVE-2026-58062 Public exploitFix available 9.3 CriticalAugust 3, 2026
• bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more BCFKS keystore load honours unbounded KDF cost from untrusted file CVE-2026-58063 Fix available 5.3 MediumAugust 3, 2026
• bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more JSSE hostname verifier CN-fallback enabled by default despite documented opt-in CVE-2026-59638 Fix available 9.3 CriticalAugust 3, 2026
• bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more CMS verifySignatures returns true for SignedData with zero signers CVE-2026-59639 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more OpenPGP CFB quick-check oracle active on symmetric/session-key paths CVE-2026-59640 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bcjmail-fips, bcmail-fips, bouncy castle for java lts +3 more +5 more S/MIME validator trusts signer-asserted signingTime for path validation CVE-2026-59641 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more CMS AuthenticatedData content not bound to MAC when authAttrs present CVE-2026-59642 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bcutil-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more OER parser recurses without depth limit on self-referential IEEE 1609.2 schema CVE-2026-59645 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more DTLS handshake reassembler allocates buffer from unchecked 24-bit length CVE-2026-59646 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more CRMF/CMP password-MAC honours unbounded iteration count CVE-2026-59647 Fix available 6.9 MediumAugust 3, 2026
• bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more OpenPGP Argon2 S2K honours attacker-chosen memory and passes CVE-2026-59648 Fix available 6.9 MediumAugust 3, 2026
• bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more OpenPGP user-attribute subpacket length bounded only by JVM max memory CVE-2026-59649 Fix available 8.7 HighAugust 3, 2026
• bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more MTI/A0 DH agreement exponentiates unvalidated peer value CVE-2026-59650 Fix available 9.3 CriticalAugust 3, 2026
• bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more BKS keystore accepts legacy version with 16-bit integrity MAC key CVE-2026-59651 Fix available 7.1 HighAugust 3, 2026
• bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 more BKS/UBER keystore allocates from untrusted lengths before integrity check CVE-2026-12185 Fix available 7.1 HighAugust 3, 2026
• bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 more Name Constraints bypass via trailing dot in rfc822Name and URI CVE-2026-8763 Fix available 9.3 CriticalAugust 3, 2026
• bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input CVE-2026-15055 Fix available 5.3 MediumAugust 3, 2026
• bouncycastle bouncy castle for java, netapp active iq unified manager, bluexp +2 more +4 more Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") CVE-2024-30171 Fix available 5.9 MediumMay 7, 2024
• bouncycastle bouncy castle for java, fips java api +1 more Bouncy Castle Denial of Service (DoS) CVE-2023-33202 Fix available 5.5 MediumNovember 23, 2023