Lucene search
+L

23004 matches found

Snyk
Snyk
added 2026/08/03 3:53 a.m.7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the processRecord method of DTLSReliableHandshake, where the DTLSReassembler constructor allocates a bytelength buffer directly from the 24-bit handshake length field without checking it...

8.7CVSS5.6AI score0.00291EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the processRecord method of DTLSReliableHandshake, where the DTLSReassembler constructor allocates a bytelength buffer directly from the 24-bit handshake length field without checking it...

8.7CVSS5.6AI score0.00291EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the processRecord method of DTLSReliableHandshake, where the DTLSReassembler constructor allocates a bytelength buffer directly from the 24-bit handshake length field without checking it...

8.7CVSS5.6AI score0.00291EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.6 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.5 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/03 2:55 a.m.6 views

CVE-2026-12852 MLS wire decoder allocates attacker-declared opaque length before bounds check

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/03 2:44 a.m.54 views

CVE-2026-14682

CVE-2026-14682 affects Bouncy Castle for Java: unbounded up-front allocation on a definite-length read can cause an OOM. Affected: BC-Java before 1.85; BC-LTS before 2.73.12; BC-FJA before bc-fips 1.0.2.7 (1.0.x), 2.0.2 (2.0.x), 2.1.3 (2.1.x), and before bctls-fips 1.0.24. Impact per NVD: high (C...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/03 2:44 a.m.8 views

EUVD-2026-52132

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/03 2:44 a.m.7 views

CVE-2026-14682 Possible OOM from unbounded up-front allocation on a definite-length read

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/03 2:44 a.m.52 views

CVE-2026-14682 Possible OOM from unbounded up-front allocation on a definite-length read

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS0.00263EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/03 2:44 a.m.10 views

CVE-2026-14682

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2026/08/03 2:44 a.m.6 views

CVE-2026-14682 Possible OOM from unbounded up-front allocation on a definite-length read

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...

8.7CVSS5.5AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2026/08/03 2:37 a.m.7 views

CVE-2026-58060 HSS public-key level count unbounded, enabling huge allocation on verify

In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS5.5AI score0.00365EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/03 2:37 a.m.57 views

CVE-2026-58060 HSS public-key level count unbounded, enabling huge allocation on verify

In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...

8.7CVSS0.00365EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/03 12:48 a.m.10 views

CVE-2026-59646

In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24 2.1.X...

8.7CVSS5.6AI score0.00291EPSS
SaveExploits0References5Affected Software2
Debian CVE
Debian CVE
added 2026/08/03 12:48 a.m.12 views

CVE-2026-59646

In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24 2.1.X...

8.7CVSS5.6AI score0.00291EPSS
SaveExploits0
CVE
CVE
added 2026/08/03 12:48 a.m.55 views

CVE-2026-59646

CVE-2026-59646 affects Bouncy Castle for Java before 1.85 (and BC-Java LTS before 2.73.12, plus BC-FJA before bctls-fips 1.0.24/2.0.24/2.1.24). The root cause is the DTLS handshake reassembler allocating a buffer from an unchecked 24-bit length. This can impact DTLS processing and buffer handling...

8.7CVSS5.6AI score0.00291EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/03 12:38 a.m.54 views

CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS0.00263EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/03 12:38 a.m.8 views

EUVD-2026-52021

In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

7.1CVSS5.4AI score0.00263EPSS
SaveExploits0References2
Rows per page
Query Builder