CVE-2025-9341
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files org/bouncycastle/crypto/fips/AESNativeCBC.Java, org/bouncycastle/crypto/engines/AESNativeCBC.Java. This issue affects Bouncy Castle for Java FIPS: 2.1.0; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.
- Score
- CVSS 4.0 5.9 Medium
- Status
- Deferred - 91579145-5d7b-4cc5-b925-a0262ff19630
- Published
- 2025-08-22
- Last modified
- 2025-10-24
- Weaknesses
- CWE-400
Affected products
- Bouncy Castle For Java Fips (Legion Of The Bouncy Castle Inc.)
- Bouncy Castle For Java Lts (Legion Of The Bouncy Castle Inc.)
References
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909341
