CVE-2026-71884

A flaw was found in Bouncy Castle. The native one-shot Counter CTR mode cipher fails to verify that the input data length fits within the counter space defined by the initialization vector. When processing overly long inputs, the counter wraps around and causes the keystream to repeat. This flaw...