Legion Of The Bouncy Castle Inc. - vulnerabilities (CVEs)

85 CVEs in 13 products, 37 in the last 30 days, newest from 2026-10-09.

Products

• Bc-java - 52 CVEs
• Bc-lts-java - 35 CVEs
• Bc-fja - 32 CVEs
• Bc-csharp - 21 CVEs
• Bc-lts - 2 CVEs
• Bc Java - 2 CVEs
• Bouncy Castle For Java Fips - 2 CVEs
• Bouncy Castle For Java Lts - 2 CVEs
• Bcpix-lts - 1 CVEs
• Bcpkix-fips - 1 CVEs
• Bcpkix Fips - 1 CVEs
• Bouncy Castle For Java - 1 CVEs
• Bouncy Castle For Java - Bc-fja 2.1.0 - 1 CVEs

Newest CVEs of Legion Of The Bouncy Castle Inc.

• CVE-2026-71884 - CVSS 8.2 (high), 2026-10-09: In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter space the…
• CVE-2026-71890 - CVSS 8.7 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list,…
• CVE-2026-71891 - CVSS 7.1 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and…
• CVE-2026-18040 - CVSS 5.9 (medium), 2026-10-03: In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8) arithmetic used lookup tables indexed by field…
• CVE-2026-71885 - CVSS 9.2 (critical), 2026-10-03: In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509 credential to a LeafNode's…
• CVE-2026-71886 - CVSS 8.2 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or trust delegation from any component key…
• CVE-2026-71887 - CVSS 8.2 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature carried no…
• CVE-2026-71883 - CVSS 8.2 (high), 2026-10-03: In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the caller's key, IV and…
• CVE-2026-71888 - CVSS 8.7 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed…
• CVE-2026-71889 - CVSS 8.7 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy…
• CVE-2026-71892 - CVSS 6.9 (medium), 2026-10-03: In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients,…
• CVE-2026-85515 - CVSS 8.2 (high), 2026-10-03: In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no…
• CVE-2026-97873 - CVSS 5.3 (medium), 2026-10-03: In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ran their password-based key derivation…
• CVE-2026-18036 - CVSS 8.2 (high), 2026-10-02: In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately…
• CVE-2026-17508 - CVSS 5.3 (medium), 2026-10-02: In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input…
• CVE-2026-17507 - CVSS 8.7 (high), 2026-10-02: In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire value with…
• CVE-2026-103604 - CVSS 8.7 (high), 2026-10-02: Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.ValueToString) in Legion of the Bouncy…
• CVE-2026-103603 - CVSS 8.7 (high), 2026-10-02: Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legion of the Bouncy Castle Inc. bc-csharp…
• CVE-2026-103602 - CVSS 8.2 (high), 2026-10-02: Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who controls, or…
• CVE-2026-103601 - CVSS 8.2 (high), 2026-10-02: Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp…
• CVE-2026-103600 - CVSS 8.7 (high), 2026-10-02: Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote…
• CVE-2026-63578 - CVSS 7.5 (high), 2026-10-02: Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters) in Legion of the Bouncy Castle Inc.…
• CVE-2026-63577 - CVSS 8.2 (high), 2026-10-02: Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree) in Legion of the Bouncy Castle Inc.…
• CVE-2026-63576 - CVSS 8.2 (high), 2026-10-02: Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a…
• CVE-2026-63575 - CVSS 7.5 (high), 2026-10-02: Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0…
• CVE-2026-63574 - CVSS 8.7 (high), 2026-10-02: Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers (SignatureSubpacketsParser.ReadPacket,…
• CVE-2026-63573 - CVSS 8.2 (high), 2026-10-02: Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) in Legion of the Bouncy Castle Inc. bc-csharp…
• CVE-2026-63572 - CVSS 7.5 (high), 2026-10-02: Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an…
• CVE-2026-63571 - CVSS 8.7 (high), 2026-10-02: Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator, also used by PkixAttrCertPathBuilder)…
• CVE-2026-63570 - CVSS 7.5 (high), 2026-10-02: Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can…