Skip to contentLegion Of The Bouncy Castle Inc. Bc-java vulnerabilities
- legion of the bouncy castle inc. bc-javaMLS external commit can remove an arbitrary group memberCVE-2026-71890Fix available8.7 High
- legion of the bouncy castle inc. bc-javaBLS12-381 key validation accepts a public key built on a foreign curveCVE-2026-71891Fix available7.1 High
- legion of the bouncy castle inc. bc-javaHQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight samplerCVE-2026-18040Fix available5.9 Medium
- legion of the bouncy castle inc. bc-javaMLS X.509 credential not bound to the LeafNode signature keyCVE-2026-71885Fix available9.2 Critical
- legion of the bouncy castle inc. bc-javaOpenPGP certification accepted from a subkey without certification authorityCVE-2026-71886Fix available8.2 High
- legion of the bouncy castle inc. bc-javaOpenPGP data signature accepted from a signing subkey without cross-certificationCVE-2026-71887Fix available8.2 High
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 moreCMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absentCVE-2026-71888Fix available8.7 High
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 morePKIXCertPathReviewer does not apply X.509 name constraints to the target certificateCVE-2026-71889Fix available8.7 High
- legion of the bouncy castle inc. bc-fja, bc-java +1 moreCMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keysCVE-2026-71892Fix available6.9 Medium
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 moreOpenPGP message truncation not reported, bypassing the SEIPDv1 integrity checkCVE-2026-85515Fix available8.2 High
- legion of the bouncy castle inc. bc-java, bc-lts-java +1 moreLegacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA providerCVE-2026-97873Fix available5.3 Medium
- legion of the bouncy castle inc. bc-javaNTRU leaks private key information by reducing secret values with a non-constant-time integer divisionCVE-2026-18036Fix available8.2 High
- legion of the bouncy castle inc. bc-fja, bc-java, bc-lts-java +2 morePassword-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry pointsCVE-2026-17508Fix available5.3 Medium
- bouncycastle bc-javaMLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range senderCVE-2026-17507Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 morePKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)CVE-2026-13586Fix available5.3 Medium
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreLazy ASN.1 sequence forcing resets nesting-depth guardCVE-2026-13506Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreRSA PKCS#1 verification skips last two hash bytes in NULL-omitted pathCVE-2026-12860Fix available8.7 High
- bouncycastle bc-javaMLS wire decoder allocates attacker-declared opaque length before bounds checkCVE-2026-12852Fix available8.7 High
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP AEAD decryption skips final tag on chunk-aligned dataCVE-2026-12817Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreIESEngine stream-mode MAC forgery via length-dependent KDF splitCVE-2026-12816Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreKCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)CVE-2026-12803Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS AuthEnvelopedData fails to enforce tag-length on decryptionCVE-2026-12802Fix available8.7 High
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +3 more +5 morePossible OOM from unbounded up-front allocation on a definite-length readCVE-2026-14682Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreQuadratic-time escaping when stringifying X.500 distinguished namesCVE-2026-58059Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreHSS public-key level count unbounded, enabling huge allocation on verifyCVE-2026-58060Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreCCM-family modes write plaintext to caller buffer before tag checkCVE-2026-58061Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreStapled OCSP response accepted without binding to the checked certificateCVE-2026-58062Public exploitFix available9.3 Critical
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreBCFKS keystore load honours unbounded KDF cost from untrusted fileCVE-2026-58063Fix available5.3 Medium
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreJSSE hostname verifier CN-fallback enabled by default despite documented opt-inCVE-2026-59638Fix available9.3 Critical
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS verifySignatures returns true for SignedData with zero signersCVE-2026-59639Fix available8.7 High
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP CFB quick-check oracle active on symmetric/session-key pathsCVE-2026-59640Fix available8.7 High
- bouncycastle bcjmail-fips, bcmail-fips, bouncy castle for java lts +3 more +5 moreS/MIME validator trusts signer-asserted signingTime for path validationCVE-2026-59641Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS AuthenticatedData content not bound to MAC when authAttrs presentCVE-2026-59642Fix available8.7 High
- bouncycastle bcpg-fips, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 moreOpenPGP inline-signature policy failures silently ignoredCVE-2026-59643Fix available8.7 High
- bouncycastle bc-javaMLS hash-ratchet honours arbitrary 32-bit generation counter from senderCVE-2026-59644Fix available8.7 High
- bouncycastle bcutil-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOER parser recurses without depth limit on self-referential IEEE 1609.2 schemaCVE-2026-59645Fix available8.7 High
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreDTLS handshake reassembler allocates buffer from unchecked 24-bit lengthCVE-2026-59646Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCRMF/CMP password-MAC honours unbounded iteration countCVE-2026-59647Fix available6.9 Medium
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP Argon2 S2K honours attacker-chosen memory and passesCVE-2026-59648Fix available6.9 Medium
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP user-attribute subpacket length bounded only by JVM max memoryCVE-2026-59649Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreMTI/A0 DH agreement exponentiates unvalidated peer valueCVE-2026-59650Fix available9.3 Critical
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreBKS keystore accepts legacy version with 16-bit integrity MAC keyCVE-2026-59651Fix available7.1 High
- bouncycastle bc-javaLDAP filter injection in legacy jdk1.4 LDAPStoreHelperCVE-2026-59652Fix available6.9 Medium
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreBKS/UBER keystore allocates from untrusted lengths before integrity checkCVE-2026-12185Fix available7.1 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreName Constraints bypass via trailing dot in rfc822Name and URICVE-2026-8763Fix available9.3 Critical
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 morePKCS#8 / PBES2 decryptors honour unbounded KDF cost from inputCVE-2026-15055Fix available5.3 Medium
- bouncycastle bc-javaML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)CVE-2024-14041Fix available8.2 High
- legion of the bouncy castle inc. bc-java, red hat openshift developer tools and services, openshift developer tools and services 4.12 +30 more +32 moreUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.CVE-2026-3505Fix available8.7 High
- legion of the bouncy castle inc. bc-java, bcpix-lts, bcpkix-fips +43 more +45 morePKIX draft CompositeVerifier accepts empty signature sequence as valid.CVE-2026-5588Fix available6.3 Medium
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +29 more +31 moreNon-constant time comparisons risk private key leakage in FrodoKEM.CVE-2026-5598Fix available8.9 High
- Show moreLoading…