Skip to contentLegion Of The Bouncy Castle Inc. Bc-csharp vulnerabilities
- bouncycastle bc-csharpQuadratic-time escaping when converting X.509 distinguished names to stringsCVE-2026-1036048.7 High
- bouncycastle bc-csharpUnbounded HSS public key level count allows huge array allocation during signature verificationCVE-2026-1036038.7 High
- bouncycastle bc-csharpName constraints bypass via trailing dot in rfc822Name, dNSName and URI hostsCVE-2026-1036028.2 High
- bouncycastle bc-csharpCcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag checkCVE-2026-1036018.2 High
- bouncycastle bc-csharpUnbounded ASN.1 nesting depth causes process-terminating stack overflowCVE-2026-1036008.7 High
- bouncycastle bc-csharpUnbounded PBE iteration count when decrypting PKCS#8 private keysCVE-2026-635787.1 High
- bouncycastle bc-csharpName Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefixCVE-2026-635778.2 High
- bouncycastle bc-csharpURI name constraints checked against a mis-parsed hostCVE-2026-635768.2 High
- bouncycastle bc-csharpPKCS#12 key derivation loops about 2^32 times on a zero or negative iteration countCVE-2026-635757.1 High
- bouncycastle bc-csharpUnbounded allocation from OpenPGP signature and user attribute subpacket lengthsCVE-2026-635748.7 High
- bouncycastle bc-csharpBleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrapCVE-2026-635738.2 High
- bouncycastle bc-csharpUnbounded MAC and bag-decryption iteration counts when loading PKCS#12 filesCVE-2026-635727.1 High
- bouncycastle bc-csharpAttribute certificate path validation does not verify the attribute certificate's signatureCVE-2026-635718.7 High
- bouncycastle bc-csharpPkcs12Store.GetCertificateChain loops forever on cyclic issuer linksCVE-2026-635707.1 High
- bouncycastle bc-csharpMTI/A0 DHAgreement does not validate the peer's ephemeral valueCVE-2026-635699.1 Critical
- bouncycastle bc-csharpUnbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustionCVE-2026-635688.7 High
- bouncycastle bc-csharpIesEngine block-cipher mode checks padding before MAC (CBC padding oracle)CVE-2026-635678.2 High
- bouncycastle bc-csharpDTLS handshake reassembler allocates buffer from unchecked 24-bit lengthCVE-2026-635668.7 High
- bouncycastle bc-csharpIesEngine stream-mode MAC forgery via length-dependent KDF splitCVE-2026-160018.2 High
- bouncycastle bc-csharpKCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is usedCVE-2026-160008.7 High
- bouncycastle bc-csharpAES-CCM decryption accepts zero or out-of-range tag length, bypassing authenticationCVE-2026-159998.2 High