Skip to contentLegion Of The Bouncy Castle Inc. vulnerabilities
Newest
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreCCM-family modes write plaintext to caller buffer before tag checkCVE-2026-58061Fix available8.7 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreStapled OCSP response accepted without binding to the checked certificateCVE-2026-58062Public exploitFix available9.3 Critical
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreBCFKS keystore load honours unbounded KDF cost from untrusted fileCVE-2026-58063Fix available5.3 Medium
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreJSSE hostname verifier CN-fallback enabled by default despite documented opt-inCVE-2026-59638Fix available9.3 Critical
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS verifySignatures returns true for SignedData with zero signersCVE-2026-59639Fix available8.7 High
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP CFB quick-check oracle active on symmetric/session-key pathsCVE-2026-59640Fix available8.7 High
- bouncycastle bcjmail-fips, bcmail-fips, bouncy castle for java lts +3 more +5 moreS/MIME validator trusts signer-asserted signingTime for path validationCVE-2026-59641Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCMS AuthenticatedData content not bound to MAC when authAttrs presentCVE-2026-59642Fix available8.7 High
- bouncycastle bcpg-fips, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 moreOpenPGP inline-signature policy failures silently ignoredCVE-2026-59643Fix available8.7 High
- bouncycastle bc-javaMLS hash-ratchet honours arbitrary 32-bit generation counter from senderCVE-2026-59644Fix available8.7 High
- bouncycastle bcutil-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOER parser recurses without depth limit on self-referential IEEE 1609.2 schemaCVE-2026-59645Fix available8.7 High
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreDTLS handshake reassembler allocates buffer from unchecked 24-bit lengthCVE-2026-59646Fix available8.7 High
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreCRMF/CMP password-MAC honours unbounded iteration countCVE-2026-59647Fix available6.9 Medium
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP Argon2 S2K honours attacker-chosen memory and passesCVE-2026-59648Fix available6.9 Medium
- bouncycastle bcpg-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOpenPGP user-attribute subpacket length bounded only by JVM max memoryCVE-2026-59649Fix available8.7 High
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreMTI/A0 DH agreement exponentiates unvalidated peer valueCVE-2026-59650Fix available9.3 Critical
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreBKS keystore accepts legacy version with 16-bit integrity MAC keyCVE-2026-59651Fix available7.1 High
- bouncycastle bc-javaLDAP filter injection in legacy jdk1.4 LDAPStoreHelperCVE-2026-59652Fix available6.9 Medium
- bouncycastle bouncy castle for java lts, bc-java, legion of the bouncy castle inc. bc-lts-java +2 moreBKS/UBER keystore allocates from untrusted lengths before integrity checkCVE-2026-12185Fix available7.1 High
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreName Constraints bypass via trailing dot in rfc822Name and URICVE-2026-8763Fix available9.3 Critical
- bouncycastle bcpkix-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 morePKCS#8 / PBES2 decryptors honour unbounded KDF cost from inputCVE-2026-15055Fix available5.3 Medium
- bouncycastle bc-javaML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)CVE-2024-14041Fix available8.2 High
- legion of the bouncy castle inc. bc-ltsNative ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded stateCVE-2026-159971.7 Low
- legion of the bouncy castle inc. bc-fja, bc-lts +1 moreGCM chunking can lead to bad tag exception on decryptionCVE-2026-8149Fix available5.1 Medium
- legion of the bouncy castle inc. bc-java, red hat openshift developer tools and services, openshift developer tools and services 4.12 +30 more +32 moreUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.CVE-2026-3505Fix available8.7 High
- legion of the bouncy castle inc. bc-java, bcpix-lts, bcpkix-fips +43 more +45 morePKIX draft CompositeVerifier accepts empty signature sequence as valid.CVE-2026-5588Fix available6.3 Medium
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +29 more +31 moreNon-constant time comparisons risk private key leakage in FrodoKEM.CVE-2026-5598Fix available8.9 High
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +42 more +44 moreLDAP Injection Vulnerability in LDAPStoreHelper.javaCVE-2026-0636Fix available5.5 Medium
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +44 more +46 moreGOSTCTR implementation unable to process more than 255 blocks correctlyCVE-2025-14813Fix available9.3 Critical
- legion of the bouncy castle inc. bouncy castle for java fips, bouncy castle for java lts +1 moreBouncy Castle Vulnerable to Uncontrolled Resource ConsumptionCVE-2025-12194Fix available5.9 Medium
- legion of the bouncy castle inc. bouncy castle for javanative encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output.CVE-2025-9340Fix available0.0 None
- legion of the bouncy castle inc. bouncy castle for java fips, bouncy castle for java lts +1 moreGarbage collection can delay for AES CBC Native support, resulting in heap exhaustionCVE-2025-9341Fix available5.9 Medium
- legion of the bouncy castle inc. bouncy castle for java - bc-fja 2.1.0Hybrid Module Deployment in Multi-JVM Environments Leading to Resource ExhaustionCVE-2025-9092Fix available1.0 Low
- legion of the bouncy castle inc. bc java, bcpkix fips, siemens simatic cn 4100 +2 morePossible DOS in processing large name constraint structures in PKIXCertPathReveiwerCVE-2025-8916Fix available6.3 Medium
- legion of the bouncy castle inc. bc java, bc-fja, bouncy castle for java +2 morePossible DOS in processing specially formed ASN.1 Object IdentifiersCVE-2025-8885Fix available6.3 Medium