CVE-2026-63572

Allocation of resources without limits in PKCS12 keystore loading Pkcs12Store.Load in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file to cause a denial of service through CPU exhaustion via an iteration count close to 2^31 in the file's...

CVE-2026-63575 PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count

Loop with unreachable exit condition in the PKCS12 key derivation Pkcs12ParametersGenerator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file, or a PKCS8 encrypted private key that uses a PKCS12 password-based encryption algorithm, to...

CVE-2026-63575

The Bouncy Castle Inc. bc-csharp library (versions before 2.7.0 ) is vulnerable to a Denial of Service (DoS) attack due to a loop with an unreachable exit condition in the Pkcs12ParametersGenerator component. An attacker can provide a PKCS#12 (PFX) file or a PKCS#8 encrypted private key using a P...

EUVD-2026-91223

Allocation of resources without limits in PKCS12 keystore loading Pkcs12Store.Load in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file to cause a denial of service through CPU exhaustion via an iteration count close to 2^31 in the file's...

CVE-2026-63572

The bc-csharp library by Legion of the Bouncy Castle Inc. is vulnerable to a denial of service via CPU exhaustion in versions prior to 2.7.0 . The root cause is the allocation of resources without limits during PKCS#12 keystore loading (Pkcs12Store.Load ) and within Pkcs12Utilities.ConvertToDefin...

CVE-2026-63572 Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files

Allocation of resources without limits in PKCS12 keystore loading Pkcs12Store.Load in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file to cause a denial of service through CPU exhaustion via an iteration count close to 2^31 in the file's...

PT-2026-104134

Loop with unreachable exit condition in the PKCS12 key derivation Pkcs12ParametersGenerator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file, or a PKCS8 encrypted private key that uses a PKCS12 password-based encryption algorithm, to...

PT-2026-104131

Allocation of resources without limits in PKCS12 keystore loading Pkcs12Store.Load in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file to cause a denial of service through CPU exhaustion via an iteration count close to 2^31 in the file's...