Legion OF THE Bouncy Castle Inc. vulnerabilities
87 CVEs and advisories name Legion OF THE Bouncy Castle Inc. as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-59645OER parser recurses without depth limit on self-referential IEEE 1609.2 schema
- CVE-2026-59646DTLS handshake reassembler allocates buffer from unchecked 24-bit length
- CVE-2026-59647CRMF/CMP password-MAC honours unbounded iteration count
- CVE-2026-59648OpenPGP Argon2 S2K honours attacker-chosen memory and passes
- CVE-2026-59649OpenPGP user-attribute subpacket length bounded only by JVM max memory
- CVE-2026-59650MTI/A0 DH agreement exponentiates unvalidated peer value
- CVE-2026-59651BKS keystore accepts legacy version with 16-bit integrity MAC key
- CVE-2026-59652LDAP filter injection in legacy jdk1.4 LDAPStoreHelper
- CVE-2026-12185BKS/UBER keystore allocates from untrusted lengths before integrity check
- CVE-2026-8763Name Constraints bypass via trailing dot in rfc822Name and URI
- CVE-2026-15055PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input
- CVE-2024-14041ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)
- CVE-2026-15997Native ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded state
- CVE-2026-8149GCM chunking can lead to bad tag exception on decryption
- CVE-2026-3505Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.
- CVE-2026-5588PKIX draft CompositeVerifier accepts empty signature sequence as valid.
- CVE-2026-5598Non-constant time comparisons risk private key leakage in FrodoKEM.
- CVE-2026-0636LDAP Injection Vulnerability in LDAPStoreHelper.java
- CVE-2025-14813GOSTCTR implementation unable to process more than 255 blocks correctly
- CVE-2025-12194Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc.
- CVE-2025-9340native encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output.
- CVE-2025-9341Garbage collection can delay for AES CBC Native support, resulting in heap exhaustion
- CVE-2025-9092Hybrid Module Deployment in Multi-JVM Environments Leading to Resource Exhaustion
- CVE-2025-8916Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer
- CVE-2025-8885Possible DOS in processing specially formed ASN.1 Object Identifiers
- CVE-2018-5382Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions
- CVE-2017-13098BouncyCastle JCE TLS Bleichenbacher/ROBOT