467 matches found
CVE-2026-17507
In Bouncy Castle for Java before 1.86, the MLS implementation org.bouncycastle.mls holds RFC 9420's uint32 leafindex in a signed int, so a wire value with the top bit set decodes to a negative number. That is a legitimate encoding rather than malformed input, and it must still decode, since the M...
PT-2026-104155
Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.86 Description NTRU secret values are reduced using the % operator in three helper functions, which deviates from the division-free reference implementations. This results in integer divisions where...
PT-2026-104128
Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.86 Bouncy Castle for Java LTS versions prior to 2.73.13 Bouncy Castle for Java FIPS BC-FJA bcpkix-fips versions prior to 1.0.13 Bouncy Castle for Java FIPS BC-FJA bcpkix-fips versions prior to 2.0.13...
PT-2026-104127
Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.86 Description The MLS implementation org.bouncycastle.mls incorrectly handles the leaf index a uint32 value from RFC 9420 by storing it as a signed integer. When a wire value has the top bit set, it...
CVE-2026-17508: Allocation of Resources Without Limits or Throttling
In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...
CVE-2026-17507: Signed to Unsigned Conversion Error
In Bouncy Castle for Java before 1.86, the MLS implementation org.bouncycastle.mls holds RFC 9420's uint32 leafindex in a signed int, so a wire value with the top bit set decodes to a negative number. That is a legitimate encoding rather than malformed input, and it must still decode, since the M...
CVE-2026-18036: Observable Timing Discrepancy
In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...
Security Bulletin: IBM webMethods Integration Sever is affected by multiple CVEs related to Bouncy Castle for Java FIPS jars
Summary IBM webMethods Integration Sever uses third party Bouncy Castle for Java FIPS jars that are affected by multiple CVEs. Vulnerability Details CVEID:CVE-2026-13505 DESCRIPTION: In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X...
Improper Signature Verification
Bouncy Castle for Java is vulnerable to Improper Signature Verification. The vulnerability is due to CMS.verifySignatures returning true for SignedData objects containing no signers, which allows an attacker to bypass signature verification and have unsigned data incorrectly treated as successful...
Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities in Bouncy Castle for Java
Summary TSSC/IMC addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2026-12185 DESCRIPTION: In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle f...
Uncontrolled Resource Consumption
Bouncy Castle for Java is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to unbounded iteration counts in CRMF/CMP password-MAC processing, which allows an attacker to supply a maliciously high iteration count and cause excessive resource consumption, potentially...
CLEANSTART-2026-XR16357 In Bouncy Castle for Java before 1
CVE-2026-59650 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-WM89566 In Bouncy Castle for Java before 1
CVE-2026-58063 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-VS62795 In Bouncy Castle for Java before 1
CVE-2026-58062 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-TK63612 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-XM48481 In Bouncy Castle for Java before 1
CVE-2026-59651 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-JP93433 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-EW82020 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...