bcorg

Latest CVEs · RSS

• CVE-2026-71884 2026-10-09 · CVSS 8.2
  In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter space the I
• CVE-2026-71890 2026-10-03 · CVSS 8.7
  In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCach
• CVE-2026-71891 2026-10-03 · CVSS 7.1
  In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPos
• CVE-2026-18040 2026-10-03 · CVSS 5.9
  In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8) arithmetic used lookup tables indexed by field elem
• CVE-2026-71885 2026-10-03 · CVSS 9.2
  In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509 credential to a LeafNode's signature_ke
• CVE-2026-71886 2026-10-03 · CVSS 8.2
  In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or trust delegation from any component key of
• CVE-2026-71887 2026-10-03 · CVSS 8.2
  In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature carried no e
• CVE-2026-71883 2026-10-03 · CVSS 8.2
  In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the caller's key, IV and a
• CVE-2026-71888 2026-10-03 · CVSS 8.7
  In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about
• CVE-2026-71889 2026-10-03 · CVSS 8.7
  In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.
• CVE-2026-71892 2026-10-03 · CVSS 6.9
  In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySi
• CVE-2026-85515 2026-10-03 · CVSS 8.2
  In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integr
• CVE-2026-97873 2026-10-03 · CVSS 5.3
  In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ran their password-based key derivation wi
• CVE-2026-18036 2026-10-02 · CVSS 8.2
  In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division
• CVE-2026-17508 2026-10-02 · CVSS 5.3
  In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being
• CVE-2026-17507 2026-10-02 · CVSS 8.7
  In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire value with th
• CVE-2026-103604 2026-10-02 · CVSS 8.7
  Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.ValueToString) in Legion of the Bouncy Cas
• CVE-2026-103603 2026-10-02 · CVSS 8.7
  Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legion of the Bouncy Castle Inc. bc-csharp b
• CVE-2026-103602 2026-10-02 · CVSS 8.2
  Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who controls, or ca
• CVE-2026-103601 2026-10-02 · CVSS 8.2
  Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before
• CVE-2026-103600 2026-10-02 · CVSS 8.7
  Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauth
• CVE-2026-63578 2026-10-02 · CVSS 7.1
  Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters) in Legion of the Bouncy Castle Inc. bc-c
• CVE-2026-63577 2026-10-02 · CVSS 8.2
  Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree) in Legion of the Bouncy Castle Inc. bc-
• CVE-2026-63576 2026-10-02 · CVSS 8.2
  Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a name-con
• CVE-2026-63575 2026-10-02 · CVSS 7.1
  Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows