Skip to contentLegion Of The Bouncy Castle Inc. vulnerabilities
Newest
- legion of the bouncy castle inc. bc-lts-javaPacket CTR reports a full success length after the counter is exhaustedCVE-2026-718848.2 High
- legion of the bouncy castle inc. bc-javaMLS external commit can remove an arbitrary group memberCVE-2026-71890Fix available8.7 High
- legion of the bouncy castle inc. bc-javaBLS12-381 key validation accepts a public key built on a foreign curveCVE-2026-71891Fix available7.1 High
- legion of the bouncy castle inc. bc-javaHQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight samplerCVE-2026-18040Fix available5.9 Medium
- legion of the bouncy castle inc. bc-javaMLS X.509 credential not bound to the LeafNode signature keyCVE-2026-71885Fix available9.2 Critical
- legion of the bouncy castle inc. bc-javaOpenPGP certification accepted from a subkey without certification authorityCVE-2026-71886Fix available8.2 High
- legion of the bouncy castle inc. bc-javaOpenPGP data signature accepted from a signing subkey without cross-certificationCVE-2026-71887Fix available8.2 High
- legion of the bouncy castle inc. bc-lts-javaNative AES packet cipher returns the raw AES key on an aliasCVE-2026-718838.2 High
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 moreCMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absentCVE-2026-71888Fix available8.7 High
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 morePKIXCertPathReviewer does not apply X.509 name constraints to the target certificateCVE-2026-71889Fix available8.7 High
- legion of the bouncy castle inc. bc-fja, bc-java +1 moreCMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keysCVE-2026-71892Fix available6.9 Medium
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 moreOpenPGP message truncation not reported, bypassing the SEIPDv1 integrity checkCVE-2026-85515Fix available8.2 High
- legion of the bouncy castle inc. bc-java, bc-lts-java +1 moreLegacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA providerCVE-2026-97873Fix available5.3 Medium
- legion of the bouncy castle inc. bc-javaNTRU leaks private key information by reducing secret values with a non-constant-time integer divisionCVE-2026-18036Fix available8.2 High
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 morePassword-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry pointsCVE-2026-17508Fix available5.3 Medium
- bouncycastle bc-javaMLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range senderCVE-2026-17507Fix available8.7 High
- bouncycastle bc-csharpQuadratic-time escaping when converting X.509 distinguished names to stringsCVE-2026-1036048.7 High
- bouncycastle bc-csharpUnbounded HSS public key level count allows huge array allocation during signature verificationCVE-2026-1036038.7 High
- bouncycastle bc-csharpName constraints bypass via trailing dot in rfc822Name, dNSName and URI hostsCVE-2026-1036028.2 High
- bouncycastle bc-csharpCcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag checkCVE-2026-1036018.2 High
- bouncycastle bc-csharpUnbounded ASN.1 nesting depth causes process-terminating stack overflowCVE-2026-1036008.7 High
- bouncycastle bc-csharpUnbounded PBE iteration count when decrypting PKCS#8 private keysCVE-2026-635787.1 High
- bouncycastle bc-csharpName Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefixCVE-2026-635778.2 High
- bouncycastle bc-csharpURI name constraints checked against a mis-parsed hostCVE-2026-635768.2 High
- bouncycastle bc-csharpPKCS#12 key derivation loops about 2^32 times on a zero or negative iteration countCVE-2026-635757.1 High
- bouncycastle bc-csharpUnbounded allocation from OpenPGP signature and user attribute subpacket lengthsCVE-2026-635748.7 High
- bouncycastle bc-csharpBleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrapCVE-2026-635738.2 High
- bouncycastle bc-csharpUnbounded MAC and bag-decryption iteration counts when loading PKCS#12 filesCVE-2026-635727.1 High
- bouncycastle bc-csharpAttribute certificate path validation does not verify the attribute certificate's signatureCVE-2026-635718.7 High
- bouncycastle bc-csharpPkcs12Store.GetCertificateChain loops forever on cyclic issuer linksCVE-2026-635707.1 High
- bouncycastle bc-csharpMTI/A0 DHAgreement does not validate the peer's ephemeral valueCVE-2026-635699.1 Critical
- bouncycastle bc-csharpUnbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustionCVE-2026-635688.7 High
- bouncycastle bc-csharpIesEngine block-cipher mode checks padding before MAC (CBC padding oracle)CVE-2026-635678.2 High
- bouncycastle bc-csharpDTLS handshake reassembler allocates buffer from unchecked 24-bit lengthCVE-2026-635668.7 High
- bouncycastle bc-csharpIesEngine stream-mode MAC forgery via length-dependent KDF splitCVE-2026-160018.2 High
- bouncycastle bc-csharpKCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is usedCVE-2026-160008.7 High
- bouncycastle bc-csharpAES-CCM decryption accepts zero or out-of-range tag length, bypassing authenticationCVE-2026-159998.2 High
- legion of the bouncy castle inc. bc-fjaZeroisation of sensitive key material on garbage collection relies on finalizationCVE-2026-13505Fix available8.7 High
- legion of the bouncy castle inc. bc-fjaNative entropy source retries the CPU entropy instructions without limitCVE-2026-8798Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 morePKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)CVE-2026-13586Fix available5.3 Medium
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreLazy ASN.1 sequence forcing resets nesting-depth guardCVE-2026-13506Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreRSA PKCS#1 verification skips last two hash bytes in NULL-omitted pathCVE-2026-12860Fix available8.7 High
- bouncycastle bc-javaMLS wire decoder allocates attacker-declared opaque length before bounds checkCVE-2026-12852Fix available8.7 High
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP AEAD decryption skips final tag on chunk-aligned dataCVE-2026-12817Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreIESEngine stream-mode MAC forgery via length-dependent KDF splitCVE-2026-12816Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreKCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)CVE-2026-12803Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS AuthEnvelopedData fails to enforce tag-length on decryptionCVE-2026-12802Fix available8.7 High
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +3 more +5 morePossible OOM from unbounded up-front allocation on a definite-length readCVE-2026-14682Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreQuadratic-time escaping when stringifying X.500 distinguished namesCVE-2026-58059Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreHSS public-key level count unbounded, enabling huge allocation on verifyCVE-2026-58060Fix available8.7 High
- Show moreLoading…