BO
Vendor
Bouncycastle
141
CVEs
0
On KEV
22
New 30D
Products
BC7.5
Bc-csharp
Bouncycastle
22 CVEs0 on KEV21 new
BC9.8
Bc-java
Bouncycastle
53 CVEs0 on KEV1 new
BC9.1
Bouncy Castle For Java Lts
Bouncycastle
28 CVEs0 on KEV0 new
FJ9.1
Fips Java Api
Bouncycastle
14 CVEs0 on KEV0 new
BC8.6
Bcpg-fips
Bouncycastle
5 CVEs0 on KEV0 new
BC8.2
Bcpkix-fips
Bouncycastle
5 CVEs0 on KEV0 new
BC7.5
Bctls-fips
Bouncycastle
3 CVEs0 on KEV0 new
BC–
Bouncy Castle Crypto Package
Bouncycastle
2 CVEs0 on KEV0 new
BC5.3
Bcjmail-fips
Bouncycastle
1 CVEs0 on KEV0 new
BC5.3
Bcmail-fips
Bouncycastle
1 CVEs0 on KEV0 new
BC7.5
Bcutil-fips
Bouncycastle
1 CVEs0 on KEV0 new
BC5.9
Bouncy Castle Fips .net Api
Bouncycastle
1 CVEs0 on KEV0 new
BC5.5
Bouncy Castle For Java
Bouncycastle
1 CVEs0 on KEV0 new
LE5.3
Legion-of-the-bouncy-castle
Bouncycastle
1 CVEs0 on KEV0 new
LE–
Legion-of-the-bouncy-castle-c#-cryptography-api
Bouncycastle
1 CVEs0 on KEV0 new
LE7.5
Legion-of-the-bouncy-castle-java-crytography-api
Bouncycastle
1 CVEs0 on KEV0 new
TB5.9
The Bouncy Castle Crypto Package For Java
Bouncycastle
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-17507 | BC Bc-java Bouncycastle | 7.5 | Oct 2 | MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender |
| CVE-2026-103604 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Quadratic-time escaping when converting X.509 distinguished names to strings |
| CVE-2026-103603 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Unbounded HSS public key level count allows huge array allocation during signature verification |
| CVE-2026-103602 | BC Bc-csharp Bouncycastle | 5.3 | Oct 2 | Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts |
| CVE-2026-103601 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check |
| CVE-2026-103600 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Unbounded ASN.1 nesting depth causes process-terminating stack overflow |
| CVE-2026-63578 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Unbounded PBE iteration count when decrypting PKCS#8 private keys |
| CVE-2026-63577 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix |
| CVE-2026-63576 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | URI name constraints checked against a mis-parsed host |
| CVE-2026-63575 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count |
| CVE-2026-63574 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Unbounded allocation from OpenPGP signature and user attribute subpacket lengths |
| CVE-2026-63573 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap |
| CVE-2026-63572 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files |
| CVE-2026-63571 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Attribute certificate path validation does not verify the attribute certificate's signature |
| CVE-2026-63570 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links |
| CVE-2026-63569 | BC Bc-csharp Bouncycastle | 6.5 | Oct 2 | MTI/A0 DHAgreement does not validate the peer's ephemeral value |
| CVE-2026-63568 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion |
| CVE-2026-63567 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | IesEngine block-cipher mode checks padding before MAC (CBC padding oracle) |
| CVE-2026-63566 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | DTLS handshake reassembler allocates buffer from unchecked 24-bit length |
| CVE-2026-16001 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | IesEngine stream-mode MAC forgery via length-dependent KDF split |
| CVE-2026-16000 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used |
| CVE-2026-15999 | BC Bc-csharp Bouncycastle | 7.5 | Oct 2 | AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication |
| CVE-2026-13586 | BC Bouncy Castle For Java Lts Bouncycastle | 7.5 | Aug 3 | PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) |
| CVE-2026-13506 | FJ Fips Java Api Bouncycastle | 7.5 | Aug 3 | Lazy ASN.1 sequence forcing resets nesting-depth guard |
| CVE-2026-12860 | BC Bc-java Bouncycastle | 5.3 | Aug 3 | RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path |
| CVE-2026-12852 | BC Bc-java Bouncycastle | 7.5 | Aug 3 | MLS wire decoder allocates attacker-declared opaque length before bounds check |
| CVE-2026-12817 | BC Bcpg-fips Bouncycastle | 8.6 | Aug 3 | OpenPGP AEAD decryption skips final tag on chunk-aligned data |
| CVE-2026-12816 | BC Bouncy Castle For Java Lts Bouncycastle | 7.5 | Aug 3 | IESEngine stream-mode MAC forgery via length-dependent KDF split |
| CVE-2026-12803 | BC Bc-java Bouncycastle | 7.5 | Aug 3 | KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) |
| CVE-2026-12802 | BC Bouncy Castle For Java Lts Bouncycastle | 7.5 | Aug 3 | CMS AuthEnvelopedData fails to enforce tag-length on decryption |
| CVE-2026-14682 | BC Bctls-fips Bouncycastle | 7.5 | Aug 3 | Possible OOM from unbounded up-front allocation on a definite-length read |
| CVE-2026-58059 | BC Bc-java Bouncycastle | 7.5 | Aug 3 | Quadratic-time escaping when stringifying X.500 distinguished names |
| CVE-2026-58060 | BC Bouncy Castle For Java Lts Bouncycastle | 7.5 | Aug 3 | HSS public-key level count unbounded, enabling huge allocation on verify |
| CVE-2026-58061 | BC Bc-java Bouncycastle | 7.5 | Aug 3 | CCM-family modes write plaintext to caller buffer before tag check |
| CVE-2026-58062 | FJ Fips Java Api Bouncycastle | 9.1 | Aug 3 | Stapled OCSP response accepted without binding to the checked certificate |
| CVE-2026-58063 | FJ Fips Java Api Bouncycastle | 5.3 | Aug 3 | BCFKS keystore load honours unbounded KDF cost from untrusted file |
| CVE-2026-59638 | BC Bc-java Bouncycastle | 6.5 | Aug 3 | JSSE hostname verifier CN-fallback enabled by default despite documented opt-in |
| CVE-2026-59639 | BC Bouncy Castle For Java Lts Bouncycastle | 7.5 | Aug 3 | CMS verifySignatures returns true for SignedData with zero signers |
| CVE-2026-59640 | BC Bouncy Castle For Java Lts Bouncycastle | 5.3 | Aug 3 | OpenPGP CFB quick-check oracle active on symmetric/session-key paths |
| CVE-2026-59641 | BC Bcmail-fips Bouncycastle | 5.3 | Aug 3 | S/MIME validator trusts signer-asserted signingTime for path validation |
| CVE-2026-59642 | BC Bc-java Bouncycastle | 7.5 | Aug 3 | CMS AuthenticatedData content not bound to MAC when authAttrs present |
| CVE-2026-59643 | BC Bc-java Bouncycastle | 7.5 | Aug 3 | OpenPGP inline-signature policy failures silently ignored |
| CVE-2026-59644 | BC Bc-java Bouncycastle | 7.5 | Aug 3 | MLS hash-ratchet honours arbitrary 32-bit generation counter from sender |
| CVE-2026-59645 | BC Bouncy Castle For Java Lts Bouncycastle | 7.5 | Aug 3 | OER parser recurses without depth limit on self-referential IEEE 1609.2 schema |
| CVE-2026-59646 | BC Bouncy Castle For Java Lts Bouncycastle | 7.5 | Aug 3 | DTLS handshake reassembler allocates buffer from unchecked 24-bit length |
| CVE-2026-59647 | BC Bc-java Bouncycastle | 5.3 | Aug 3 | CRMF/CMP password-MAC honours unbounded iteration count |
| CVE-2026-59648 | BC Bouncy Castle For Java Lts Bouncycastle | 5.3 | Aug 3 | OpenPGP Argon2 S2K honours attacker-chosen memory and passes |
| CVE-2026-59649 | BC Bc-java Bouncycastle | 7.5 | Aug 3 | OpenPGP user-attribute subpacket length bounded only by JVM max memory |
| CVE-2026-59650 | BC Bc-java Bouncycastle | 9.1 | Aug 3 | MTI/A0 DH agreement exponentiates unvalidated peer value |
| CVE-2026-59651 | BC Bouncy Castle For Java Lts Bouncycastle | 7.5 | Aug 3 | BKS keystore accepts legacy version with 16-bit integrity MAC key |
| CVE-2026-59652 | BC Bc-java Bouncycastle | 6.5 | Aug 3 | LDAP filter injection in legacy jdk1.4 LDAPStoreHelper |
| CVE-2026-12185 | BC Bc-java Bouncycastle | 8.6 | Aug 3 | BKS/UBER keystore allocates from untrusted lengths before integrity check |
| CVE-2026-8763 | BC Bc-java Bouncycastle | 9.1 | Aug 3 | Name Constraints bypass via trailing dot in rfc822Name and URI |
| CVE-2026-15055 | BC Bc-java Bouncycastle | 8.2 | Aug 3 | PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input |
| CVE-2024-14041 | BC Bc-java Bouncycastle | 5.9 | Jul 28 | ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash) |
| CVE-2023-33202 | FJ Fips Java Api Bouncycastle | 5.5 | Nov 23 | Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class |
| CVE-2023-33201 | BC Bc-java Bouncycastle | 5.3 | Jul 5 | Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability |
| CVE-2022-45146 | FJ Fips Java Api Bouncycastle | 5.5 | Nov 21 | An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4 |
| CVE-2020-15522 | FJ Fips Java Api Bouncycastle | 5.9 | May 20 | Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can… |
| CVE-2020-28052 | BC Bc-java Bouncycastle | 8.1 | Dec 18 | An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66 |