Skip to contentLegion Of The Bouncy Castle Inc. Bc-fja vulnerabilities
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 moreCMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absentCVE-2026-71888Fix available8.7 High
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 morePKIXCertPathReviewer does not apply X.509 name constraints to the target certificateCVE-2026-71889Fix available8.7 High
- legion of the bouncy castle inc. bc-fja, bc-java +1 moreCMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keysCVE-2026-71892Fix available6.9 Medium
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 moreOpenPGP message truncation not reported, bypassing the SEIPDv1 integrity checkCVE-2026-85515Fix available8.2 High
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 morePassword-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry pointsCVE-2026-17508Fix available5.3 Medium
- legion of the bouncy castle inc. bc-fjaZeroisation of sensitive key material on garbage collection relies on finalizationCVE-2026-13505Fix available8.7 High
- legion of the bouncy castle inc. bc-fjaNative entropy source retries the CPU entropy instructions without limitCVE-2026-8798Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 morePKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)CVE-2026-13586Fix available5.3 Medium
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreLazy ASN.1 sequence forcing resets nesting-depth guardCVE-2026-13506Fix available8.7 High
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP AEAD decryption skips final tag on chunk-aligned dataCVE-2026-12817Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS AuthEnvelopedData fails to enforce tag-length on decryptionCVE-2026-12802Fix available8.7 High
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +3 more +5 morePossible OOM from unbounded up-front allocation on a definite-length readCVE-2026-14682Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreQuadratic-time escaping when stringifying X.500 distinguished namesCVE-2026-58059Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreHSS public-key level count unbounded, enabling huge allocation on verifyCVE-2026-58060Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreCCM-family modes write plaintext to caller buffer before tag checkCVE-2026-58061Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreStapled OCSP response accepted without binding to the checked certificateCVE-2026-58062Public exploitFix available9.3 Critical
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreBCFKS keystore load honours unbounded KDF cost from untrusted fileCVE-2026-58063Fix available5.3 Medium
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreJSSE hostname verifier CN-fallback enabled by default despite documented opt-inCVE-2026-59638Fix available9.3 Critical
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS verifySignatures returns true for SignedData with zero signersCVE-2026-59639Fix available8.7 High
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP CFB quick-check oracle active on symmetric/session-key pathsCVE-2026-59640Fix available8.7 High
- bouncycastle bcjmail-fips, bcmail-fips, bouncy castle for java lts +3 more +5 moreS/MIME validator trusts signer-asserted signingTime for path validationCVE-2026-59641Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS AuthenticatedData content not bound to MAC when authAttrs presentCVE-2026-59642Fix available8.7 High
- bouncycastle bcpg-fips, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 moreOpenPGP inline-signature policy failures silently ignoredCVE-2026-59643Fix available8.7 High
- bouncycastle bcutil-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOER parser recurses without depth limit on self-referential IEEE 1609.2 schemaCVE-2026-59645Fix available8.7 High
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreDTLS handshake reassembler allocates buffer from unchecked 24-bit lengthCVE-2026-59646Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCRMF/CMP password-MAC honours unbounded iteration countCVE-2026-59647Fix available6.9 Medium
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP Argon2 S2K honours attacker-chosen memory and passesCVE-2026-59648Fix available6.9 Medium
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP user-attribute subpacket length bounded only by JVM max memoryCVE-2026-59649Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreName Constraints bypass via trailing dot in rfc822Name and URICVE-2026-8763Fix available9.3 Critical
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 morePKCS#8 / PBES2 decryptors honour unbounded KDF cost from inputCVE-2026-15055Fix available5.3 Medium
- legion of the bouncy castle inc. bc-fja, bc-lts +1 moreGCM chunking can lead to bad tag exception on decryptionCVE-2026-8149Fix available5.1 Medium
- legion of the bouncy castle inc. bouncy castle for java - bc-fja 2.1.0Hybrid Module Deployment in Multi-JVM Environments Leading to Resource ExhaustionCVE-2025-9092Fix available1.0 Low
- legion of the bouncy castle inc. bc java, bc-fja, bouncy castle for java +2 morePossible DOS in processing specially formed ASN.1 Object IdentifiersCVE-2025-8885Fix available6.3 Medium