The vulnerability of the Bouncy Castle cryptographic protection mechanism lies in the possibility of recovering unreliable data structures stored in memory, allowing an attacker to execute arbitrary code.

🗓️ 31 May 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Bouncy Castle vulnerability enables recovery of data structures and code execution with crafted key.

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence is affected by a Using Components with Known Vulnerabilities vulnerability	14 Oct 201916:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in The Bouncy Castle Crypto Package For Java affect IBM Application Performance Management products	25 Sep 202309:11	–	ibm
IBM Security Bulletins	Security Bulletin: Resilient is vulnerable to Using Components with Known Vulnerabilities	19 Apr 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Bouncy Castle as used by IBM QRadar SIEM contains multiple vulnerabilities (CVE-2018-1000613, CVE-2017-13098, CVE-2018-1000180)	5 Feb 202119:10	–	ibm
IBM Security Bulletins	Security Bulletin: Bouncy Castle Vulnerabilities Affect IBM Sterling B2B Integrator	6 Oct 202114:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Bouncy Castle affects Apache Solr shipped with IBM Operations Analytics - Log Analysis	16 Apr 202115:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	13 Apr 202120:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Bouncy Castle API affect IBM License Metric Tool v9.	3 Apr 202008:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2022-22968, CVE-2022-24785, CVE-2017-18214, CVE-2016-4055, CVE-2018-1000613, CVE-2020-15522, CVE-2018-1000180, CVE-2020-26939, CVE-2022-22314)	26 Mar 202502:11	–	ibm

Vulners

Node

legion_of_the_bouncy_castle bouncy_castleRange1.58–1.60

OR

google android_studioMatch2025.2.3.9

Source	Link
github	www.github.com/bcgit/bc-java/commit/4092ede58da51af9a21e4825fbad0d9a3ef5a223
github	www.github.com/bcgit/bc-java/commit/cd98322b171b15b3f88c5ec871175147893c31e6
security	www.security.netapp.com/advisory/ntap-20190204-0003/
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
oracle	www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
web	www.web.nvd.nist.gov/view/vuln/detail

10 Feb 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 27.5

CVSS 39.8

EPSS0.05036

bouncy castle memory data structures remote code execution crafted key