Bc-java (Legion Of The Bouncy Castle Inc.) - vulnerabilities (CVEs)

52 CVEs, 14 in the last 30 days, 2 known versions, newest CVE from 2026-10-03. Vendor: Legion Of The Bouncy Castle Inc..

CVEs of Bc-java

CVE-2026-71890 - CVSS 8.7 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list,…
CVE-2026-71891 - CVSS 7.1 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and…
CVE-2026-18040 - CVSS 5.9 (medium), 2026-10-03: In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8) arithmetic used lookup tables indexed by field…
CVE-2026-71885 - CVSS 9.2 (critical), 2026-10-03: In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509 credential to a LeafNode's…
CVE-2026-71886 - CVSS 8.2 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or trust delegation from any component key…
CVE-2026-71887 - CVSS 8.2 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature carried no…
CVE-2026-71888 - CVSS 8.7 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed…
CVE-2026-71889 - CVSS 8.7 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy…
CVE-2026-71892 - CVSS 6.9 (medium), 2026-10-03: In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients,…
CVE-2026-85515 - CVSS 8.2 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no…
CVE-2026-97873 - CVSS 5.3 (medium), 2026-10-03: In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ran their password-based key derivation…
CVE-2026-18036 - CVSS 8.2 (high), 2026-10-02: In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately…
CVE-2026-17508 - CVSS 5.3 (medium), 2026-10-02: In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input…
CVE-2026-17507 - CVSS 8.7 (high), 2026-10-02: In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire value with…
CVE-2026-13586 - CVSS 7.5 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS…
CVE-2026-13506 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before…
CVE-2026-12860 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java…
CVE-2026-12852 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
CVE-2026-12817 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS…
CVE-2026-12816 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS…
CVE-2026-12803 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy…
CVE-2026-12802 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS…
CVE-2026-14682 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for…
CVE-2026-58059 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS…
CVE-2026-58060 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for…
CVE-2026-58061 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS…
CVE-2026-58062 - CVSS 9.3 (critical), 2026-08-03: In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for…
CVE-2026-58063 - CVSS 5.3 (medium), 2026-08-03: In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS…
CVE-2026-59638 - CVSS 9.3 (critical), 2026-08-03: In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle…
CVE-2026-59639 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS…
CVE-2026-59640 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java…
CVE-2026-59641 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java…
CVE-2026-59642 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java…
CVE-2026-59643 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA)…
CVE-2026-59644 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
CVE-2026-59645 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle…
CVE-2026-59646 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for…
CVE-2026-59647 - CVSS 6.9 (medium), 2026-08-03: In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before…
CVE-2026-59648 - CVSS 6.9 (medium), 2026-08-03: In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before…
CVE-2026-59649 - CVSS 8.7 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java…
CVE-2026-59650 - CVSS 9.3 (critical), 2026-08-03: In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before…
CVE-2026-59651 - CVSS 7.5 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS…
CVE-2026-59652 - CVSS 6.9 (medium), 2026-08-03: In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.
CVE-2026-12185 - CVSS 8.6 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for…
CVE-2026-8763 - CVSS 9.3 (critical), 2026-08-03: In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS…
CVE-2026-15055 - CVSS 8.2 (high), 2026-08-03: In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS…
CVE-2024-14041 - CVSS 8.2 (high), 2026-07-28: In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM (CRYSTALS-Kyber) routines divided secret-derived polynomial coefficients by the modulus q:…
CVE-2026-5598 - CVSS 8.9 (high), 2026-04-15: Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program…
CVE-2026-5588 - CVSS 7.5 (high), 2026-04-15: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy…
CVE-2026-3505 - CVSS 8.7 (high), 2026-04-15: Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all…
CVE-2026-0636 - CVSS 6.5 (medium), 2026-04-15: Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all…
CVE-2025-14813 - CVSS 9.3 (critical), 2026-04-15: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability…