Skip to contentBouncycastle Bouncy Castle For Java Lts vulnerabilities
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 morePKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)CVE-2026-13586Fix available5.3 Medium
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreLazy ASN.1 sequence forcing resets nesting-depth guardCVE-2026-13506Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreRSA PKCS#1 verification skips last two hash bytes in NULL-omitted pathCVE-2026-12860Fix available8.7 High
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP AEAD decryption skips final tag on chunk-aligned dataCVE-2026-12817Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreIESEngine stream-mode MAC forgery via length-dependent KDF splitCVE-2026-12816Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreKCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)CVE-2026-12803Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS AuthEnvelopedData fails to enforce tag-length on decryptionCVE-2026-12802Fix available8.7 High
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +3 more +5 morePossible OOM from unbounded up-front allocation on a definite-length readCVE-2026-14682Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreQuadratic-time escaping when stringifying X.500 distinguished namesCVE-2026-58059Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreHSS public-key level count unbounded, enabling huge allocation on verifyCVE-2026-58060Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreCCM-family modes write plaintext to caller buffer before tag checkCVE-2026-58061Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreStapled OCSP response accepted without binding to the checked certificateCVE-2026-58062Public exploitFix available9.3 Critical
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreBCFKS keystore load honours unbounded KDF cost from untrusted fileCVE-2026-58063Fix available5.3 Medium
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreJSSE hostname verifier CN-fallback enabled by default despite documented opt-inCVE-2026-59638Fix available9.3 Critical
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS verifySignatures returns true for SignedData with zero signersCVE-2026-59639Fix available8.7 High
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP CFB quick-check oracle active on symmetric/session-key pathsCVE-2026-59640Fix available8.7 High
- bouncycastle bcjmail-fips, bcmail-fips, bouncy castle for java lts +3 more +5 moreS/MIME validator trusts signer-asserted signingTime for path validationCVE-2026-59641Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS AuthenticatedData content not bound to MAC when authAttrs presentCVE-2026-59642Fix available8.7 High
- bouncycastle bcutil-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOER parser recurses without depth limit on self-referential IEEE 1609.2 schemaCVE-2026-59645Fix available8.7 High
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreDTLS handshake reassembler allocates buffer from unchecked 24-bit lengthCVE-2026-59646Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCRMF/CMP password-MAC honours unbounded iteration countCVE-2026-59647Fix available6.9 Medium
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP Argon2 S2K honours attacker-chosen memory and passesCVE-2026-59648Fix available6.9 Medium
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP user-attribute subpacket length bounded only by JVM max memoryCVE-2026-59649Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreMTI/A0 DH agreement exponentiates unvalidated peer valueCVE-2026-59650Fix available9.3 Critical
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreBKS keystore accepts legacy version with 16-bit integrity MAC keyCVE-2026-59651Fix available7.1 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreBKS/UBER keystore allocates from untrusted lengths before integrity checkCVE-2026-12185Fix available7.1 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreName Constraints bypass via trailing dot in rfc822Name and URICVE-2026-8763Fix available9.3 Critical
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 morePKCS#8 / PBES2 decryptors honour unbounded KDF cost from inputCVE-2026-15055Fix available5.3 Medium