CVE-2026-15997 Native ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded state

[
  {
    "vendor": "Legion of the Bouncy Castle Inc.",
    "product": "BC-LTS",
    "platforms": [
      "ARM"
    ],
    "collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java-lts/",
    "packageName": "bcprov-lts8on",
    "repo": "https://github.com/bcgit/bc-lts-java",
    "programFiles": [
      "https://github.com/bcgit/bc-lts-java/blob/main/native_c/arm/sha/shake.c",
      "https://github.com/bcgit/bc-lts-java/blob/main/native_c/arm/sha/sha3.c"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "2.73.0",
        "lessThan": "2.73.12.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]