Legion OF THE Bouncy Castle Inc. vulnerabilities
87 CVEs and advisories name Legion OF THE Bouncy Castle Inc. as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-71884Packet CTR reports a full success length after the counter is exhausted
- CVE-2026-71890MLS external commit can remove an arbitrary group member
- CVE-2026-71891BLS12-381 key validation accepts a public key built on a foreign curve
- CVE-2026-18040HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler
- CVE-2026-71885MLS X.509 credential not bound to the LeafNode signature key
- CVE-2026-71886OpenPGP certification accepted from a subkey without certification authority
- CVE-2026-71887OpenPGP data signature accepted from a signing subkey without cross-certification
- CVE-2026-71883Native AES packet cipher returns the raw AES key on an alias
- CVE-2026-71888CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent
- CVE-2026-71889PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate
- CVE-2026-71892CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys
- CVE-2026-85515OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check
- CVE-2026-97873Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider
- CVE-2026-18036NTRU leaks private key information by reducing secret values with a non-constant-time integer division
- CVE-2026-17508Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points
- CVE-2026-17507MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender
- CVE-2026-103604Quadratic-time escaping when converting X.509 distinguished names to strings
- CVE-2026-103603Unbounded HSS public key level count allows huge array allocation during signature verification
- CVE-2026-103602Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts
- CVE-2026-103601CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check
- CVE-2026-103600Unbounded ASN.1 nesting depth causes process-terminating stack overflow
- CVE-2026-63578Unbounded PBE iteration count when decrypting PKCS#8 private keys
- CVE-2026-63577Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix
- CVE-2026-63576URI name constraints checked against a mis-parsed host
- CVE-2026-63575PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count
- CVE-2026-63574Unbounded allocation from OpenPGP signature and user attribute subpacket lengths
- CVE-2026-63573Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap
- CVE-2026-63572Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files
- CVE-2026-63571Attribute certificate path validation does not verify the attribute certificate's signature
- CVE-2026-63570Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links