CVE-2026-103601

Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...

CVE-2026-103601

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to an issue where unverified plaintext is released in the CCM (CcmBlockCipher ) and DSTU 7624 CCM (KCcmBlockCipher ) AEAD modes. The root cause is that the decryption process writes recovered plaintex...

Improper Validation of Integrity Check Value

Overview org.bouncycastle:bcprov-jdk15 is a package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5. Affected versions of this package are vulnerable to Improper Validation of Integrity...