CVE-2026-12852

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this by providing a specially crafted message to the MLS wire decoder. The decoder allocates an attacker-declared opaque length without first performing a bounds check. This can lead to excessive memory allocation,...

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

UBUNTU-CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852 MLS wire decoder allocates attacker-declared opaque length before bounds check

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852

CVE-2026-12852 affects Bouncy Castle for Java prior to 1.85, where the MLS wire decoder allocates an attacker-declared opaque length before performing bounds checks. This is a vulnerability in the decoder component that could impact availability (per CVSS 4.0: AV:N/AC:L/AT:N/PR:N/UI:N/VI:N/SC:N/S...

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852: Memory Allocation with Excessive Size Value

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

PT-2026-67019

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Description The MLS wire decoder allocates memory based on an opaque length declared by an attacker before performing a bounds check. This behavior can lead to excessive memory allocation...