CVE-2026-15055 PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input

In Bouncy Castle for Java before 1.85, PKCS8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...

CVE-2026-15055

CVE-2026-15055 affects Bouncy Castle for Java (before 1.85), LTS (before 2.73.12), and BC-FJA (before bcpkix-fips 1.0.12 / 2.0.12 / 2.1.12). The PKCS#8 / PBES2 decryptors honour an unbounded KDF cost parameter from the input, enabling a denial-of-service attack by supplying a key with an excessiv...

PT-2026-67529

Name of the Vulnerable Software and Affected Versions cryptography versions prior to 49.0.0 Description A flaw exists in the verifier where a wildcard pattern in the DNS Subject Alternative Name SAN of a leaf certificate is incorrectly treated as matching a more-specific permitted constraint of a...

CVE-2026-10774

Summary. CVE-2026-10774 affects Zephyr’s Bluetooth Mesh implementation. The vulnerability arises when subnet keys are torn down: net_keys_create() imports the Private Beacon Key into a PSA key slot, but subnet_keys_destroy() did not balancedly free the slot due to a removed Kconfig guard. This cr...

CVE-2026-10774 PSA key-slot leak in Bluetooth Mesh subnet deletion leading to resource-exhaustion DoS

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, netkeyscreate imports the Private Beacon Key into a PSA key slot under CONFIGBTMESHPRIVBEACONS enabled by default, but subnetkeysdestroy guarded the matchin...

PT-2026-67530

Name of the Vulnerable Software and Affected Versions python-cryptography versions prior to 49.0.0 Description When resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same candidate, leading to an exponential...

The vulnerability of Java Cryptography Libraries Bouncy Castle for Java FIPS and Bouncy Castle for Java LTS lies in their uncontrolled resource consumption, which allows attackers to cause service failures.

The vulnerability of Java Cryptographic Libraries, specifically Bouncy Castle for Java FIPS and Bouncy Castle for Java LTS, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...

kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

CVE-2026-64313

A flaw was found in the Linux kernel's Elliptic Curve Cryptography ECC component. An attacker on an adjacent network could exploit an error in the very long integer vli multiplication's carry flag calculation. This mathematical inaccuracy in cryptographic operations could lead to high impact on...

CVE-2026-64310

A flaw was found in the Linux kernel's crypto: ccp component. A local user, by triggering specific SEV Secure Encrypted Virtualization input/output control ioctl operations when SEV initialization fails and Kernel-based Virtual Machine KVM is actively running virtual machines, could cause the...

EUVD-2026-50614

Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Formalization of Security

Proof assistants are often used to validate that designs and implementations meet their expected security properties. A further motivation for using proof assistants is to support certification. This chapter focuses on their applications to system security, language-based security, secure...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

CVE-2026-64308

A flaw was found in the Linux kernel's crypto: ccp module, which handles AMD Secure Encrypted Virtualization SEV and Secure Nested Paging SNP features. A local user, by sending specific commands through the /dev/sev interface, could exploit improper initialization handling. If SEV initialization...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in the ML-KEM Poly.toMsg, Poly.compressPoly, and PolyVec.compressPolyVec routines. An attacker can recover a long-term private key by sending ciphertexts and measuring the time taken by repeated decapsulation operations th...

CVE-2024-14041

In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM CRYSTALS-Kyber routines divided secret-derived polynomial coefficients by the modulus q: Poly.toMsg, which decodes the decrypted message, and the ciphertext compression routines Poly.compressPoly and PolyVec.compressPolyVec. An...

CVE-2024-14041

Bouncy Castle for Java versions 1.73 to before 1.78 is affected by a timing-side-channel in ML-KEM (CRYSTALS-Kyber) decapsulation. Three routines divide secret-derived polynomial coefficients by the modulus q: Poly.toMsg (decoding the decrypted message) and the ciphertext compression routines Pol...

CVE-2026-64544 crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - fix OOB read in pefiledigestpecontents pefiledigestpecontents computes the trailing-data hash length as pelen - hashedbytes + certssize. A crafted PE can make the addition exceed pelen, causing the unsign...