59 matches found
CVE-2026-63575
Loop with unreachable exit condition in the PKCS12 key derivation Pkcs12ParametersGenerator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a PKCS12 PFX file, or a PKCS8 encrypted private key that uses a PKCS12 password-based encryption algorithm, to...
CVE-2026-63578 Unbounded PBE iteration count when decrypting PKCS#8 private keys
Allocation of resources without limits in password-based private-key decryption PbeUtilities.GenerateCipherParameters in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply an encrypted private key, such as a PKCS8 EncryptedPrivateKeyInfo or "ENCRYPTED PRIVAT...
CVE-2026-63578 Unbounded PBE iteration count when decrypting PKCS#8 private keys
Allocation of resources without limits in password-based private-key decryption PbeUtilities.GenerateCipherParameters in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply an encrypted private key, such as a PKCS8 EncryptedPrivateKeyInfo or "ENCRYPTED PRIVAT...
CVE-2026-63578 Unbounded PBE iteration count when decrypting PKCS#8 private keys
Allocation of resources without limits in password-based private-key decryption PbeUtilities.GenerateCipherParameters in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply an encrypted private key, such as a PKCS8 EncryptedPrivateKeyInfo or "ENCRYPTED PRIVAT...
CVE-2026-15055
A flaw was found in Bouncy Castle for Java. An attacker could exploit this vulnerability by providing a specially crafted input to the PKCS8 / PBES2 decryptors. This input could specify an excessively high Key Derivation Function KDF cost, causing the decryptor to consume significant computationa...
DEBIAN-CVE-2026-15055
In Bouncy Castle for Java before 1.85, PKCS8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...
CVE-2026-15055
In Bouncy Castle for Java before 1.85, PKCS8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...
CVE-2026-15055: Allocation of Resources Without Limits or Throttling
In Bouncy Castle for Java before 1.85, PKCS8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...
EUVD-2019-3389
Malware in sbrugna...
EUVD-2025-20490
Malicious code in bioql PyPI...
CVE-2025-21433
Transient DOS when importing a PKCS8-encoded RSA private key with a zero-sized modulus...
CVE-2025-21433
Transient DOS when importing a PKCS8-encoded RSA private key with a zero-sized modulus...
CVE-2025-21433
CVE-2025-21433 affects Qualcomm closed‑source components. The issue is a transient denial-of-service that occurs when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. Root cause is a zero-sized modulus handling in the affected component(s); impact is Denial of Service (availa...
CVE-2025-21433 NULL Pointer Dereference in SPS-HLOS
Transient DOS when importing a PKCS8-encoded RSA private key with a zero-sized modulus...
CVE-2025-21433: NULL Pointer Dereference
Transient DOS when importing a PKCS8-encoded RSA private key with a zero-sized modulus...
PT-2025-28434 · Qualcomm · 215 Mobile Firmware +241
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A transient denial-of-service DOS issue occurs when importing a PKCS8-encoded RSA private key that has a zero-sized modulus. Recommendations: At the moment, there is no information about a...
CVE-2024-23357
Transient DOS while importing a PKCS8-encoded RSA key with zero bytes modulus...
CVE-2024-23357 NULL Pointer Dereference in HLOS
Transient DOS while importing a PKCS8-encoded RSA key with zero bytes modulus...
CVE-2024-23357
CVE-2024-23357 describes a transient DoS when importing a PKCS#8-encoded RSA key with a zero-byte modulus. Connected documents corroborate a Qualcomm/Android context and indicate remediation via security patches (Android patch levels 2024-08-01/05 and related Qualcomm bulletins). Public exploitat...