Legion OF THE Bouncy Castle Inc. vulnerabilities
87 CVEs and advisories name Legion OF THE Bouncy Castle Inc. as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-63569MTI/A0 DHAgreement does not validate the peer's ephemeral value
- CVE-2026-63568Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion
- CVE-2026-63567IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)
- CVE-2026-63566DTLS handshake reassembler allocates buffer from unchecked 24-bit length
- CVE-2026-16001IesEngine stream-mode MAC forgery via length-dependent KDF split
- CVE-2026-16000KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used
- CVE-2026-15999AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication
- CVE-2026-13505Zeroisation of sensitive key material on garbage collection relies on finalization
- CVE-2026-8798Native entropy source retries the CPU entropy instructions without limit
- CVE-2026-13586PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
- CVE-2026-13506Lazy ASN.1 sequence forcing resets nesting-depth guard
- CVE-2026-12860RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path
- CVE-2026-12852MLS wire decoder allocates attacker-declared opaque length before bounds check
- CVE-2026-12817OpenPGP AEAD decryption skips final tag on chunk-aligned data
- CVE-2026-12816IESEngine stream-mode MAC forgery via length-dependent KDF split
- CVE-2026-12803KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)
- CVE-2026-12802CMS AuthEnvelopedData fails to enforce tag-length on decryption
- CVE-2026-14682Possible OOM from unbounded up-front allocation on a definite-length read
- CVE-2026-58059Quadratic-time escaping when stringifying X.500 distinguished names
- CVE-2026-58060HSS public-key level count unbounded, enabling huge allocation on verify
- CVE-2026-58061CCM-family modes write plaintext to caller buffer before tag check
- CVE-2026-58062Stapled OCSP response accepted without binding to the checked certificate
- CVE-2026-58063BCFKS keystore load honours unbounded KDF cost from untrusted file
- CVE-2026-59638JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
- CVE-2026-59639CMS verifySignatures returns true for SignedData with zero signers
- CVE-2026-59640OpenPGP CFB quick-check oracle active on symmetric/session-key paths
- CVE-2026-59641S/MIME validator trusts signer-asserted signingTime for path validation
- CVE-2026-59642CMS AuthenticatedData content not bound to MAC when authAttrs present
- CVE-2026-59643OpenPGP inline-signature policy failures silently ignored
- CVE-2026-59644MLS hash-ratchet honours arbitrary 32-bit generation counter from sender