[ Vendor · 41 CVEs ]
Legion of the Bouncy Castle Inc.
CVEs affecting Legion of the Bouncy Castle Inc. published in the last 30 days, plus any Legion of the Bouncy Castle Inc. CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-71884 | 9 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. BC-LTS-JAVAIn Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter… | |
| CVE-2026-85515 | 3 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path… | |
| CVE-2026-97873 | 3 Oct 2026 | CVSS 5.3 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ran their password-based key… | |
| CVE-2026-71887 | 3 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature… | |
| CVE-2026-71888 | 3 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields… | |
| CVE-2026-71889 | 3 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy… | |
| CVE-2026-71890 | 3 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list… | |
| CVE-2026-71891 | 3 Oct 2026 | CVSS 7.1 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and… | |
| CVE-2026-71892 | 3 Oct 2026 | CVSS 6.9 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients… | |
| CVE-2026-18040 | 3 Oct 2026 | CVSS 5.9 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8) arithmetic used lookup tables indexed by… | |
| CVE-2026-71883 | 3 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. BC-LTS-JAVAIn Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the caller's… | |
| CVE-2026-71885 | 3 Oct 2026 | CVSS 9.2 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509 credential to a LeafNode's… | |
| CVE-2026-71886 | 3 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or trust delegation from any… | |
| CVE-2026-63578 | 2 Oct 2026 | CVSS 7.1 | Legion of the Bouncy Castle Inc. bc-csharpAllocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters) in Legion of the Bouncy… | |
| CVE-2026-63572 | 2 Oct 2026 | CVSS 7.1 | Legion of the Bouncy Castle Inc. bc-csharpAllocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0… | |
| CVE-2026-63573 | 2 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. bc-csharpObservable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) in Legion of the Bouncy Castle Inc… | |
| CVE-2026-63574 | 2 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. bc-csharpMemory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers (SignatureSubpacketsParser.ReadPacket… | |
| CVE-2026-63575 | 2 Oct 2026 | CVSS 7.1 | Legion of the Bouncy Castle Inc. bc-csharpLoop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy Castle Inc. bc-csharp before… | |
| CVE-2026-63576 | 2 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. bc-csharpImproper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows… | |
| CVE-2026-63577 | 2 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. bc-csharpImproper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree) in Legion of the Bouncy… | |
| CVE-2026-17507 | 2 Oct 2026 | CVSS 7.5 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire… | Fix |
| CVE-2026-17508 | 2 Oct 2026 | CVSS 5.3 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted… | |
| CVE-2026-18036 | 2 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are… | |
| CVE-2026-63570 | 2 Oct 2026 | CVSS 7.1 | Legion of the Bouncy Castle Inc. bc-csharpLoop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker… | |
| CVE-2026-63571 | 2 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. bc-csharpImproper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator, also used by… | |
| CVE-2026-103600 | 2 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. bc-csharpUncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a… | |
| CVE-2026-103601 | 2 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. bc-csharpRelease of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of the Bouncy Castle Inc… | |
| CVE-2026-103602 | 2 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. bc-csharpImproper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who… | |
| CVE-2026-103603 | 2 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. bc-csharpMemory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legion of the Bouncy Castle Inc… | |
| CVE-2026-103604 | 2 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. bc-csharpInefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.ValueToString) in Legion of the… | |
| CVE-2026-63567 | 2 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. bc-csharpObservable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has captured… | |
| CVE-2026-63568 | 2 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. bc-csharpAllocation of resources without limits or throttling in the CMP/CRMF password-based MAC verifier (PKMacBuilder) in Legion of the Bouncy Castle Inc… | |
| CVE-2026-63569 | 2 Oct 2026 | CVSS 9.1 | Legion of the Bouncy Castle Inc. bc-csharpImproper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Castle Inc. bc-csharp before… | |
| CVE-2026-15999 | 2 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. bc-csharpImproper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlockCipher) in Legion of the Bouncy Castle Inc… | |
| CVE-2026-16000 | 2 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. bc-csharpMissing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0… | |
| CVE-2026-16001 | 2 Oct 2026 | CVSS 8.2 | Legion of the Bouncy Castle Inc. bc-csharpExposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (an IesEngine constructed without a block… | |
| CVE-2026-63566 | 2 Oct 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. bc-csharpMemory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, DtlsReassembler) in Legion of the Bouncy Castle… | |
| CVE-2026-12817 | 3 Aug 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java… | |
| CVE-2026-59649 | 3 Aug 2026 | CVSS 8.7 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle… | |
| CVE-2026-8763 | 3 Aug 2026 | CVSS 9.3 | Legion of the Bouncy Castle Inc. BC-JAVAIn Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java… | |
| CVE-2026-5598 | 15 Apr 2026 | CVSS 7.5 | Legion of the Bouncy Castle Inc. BC-JAVACovert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with… |