LO
Vendor
Legion of the Bouncy Castle Inc.
143
CVEs
0
On KEV
47
New 30D
Products
BC9.1
bc-csharp
Legion of the Bouncy Castle Inc.
21 CVEs0 on KEV21 new
BC9.2
BC-JAVA
Legion of the Bouncy Castle Inc.
52 CVEs0 on KEV14 new
BC9.1
BC-LTS-JAVA
Legion of the Bouncy Castle Inc.
35 CVEs0 on KEV7 new
BC9.1
BC-FJA
Legion of the Bouncy Castle Inc.
31 CVEs0 on KEV5 new
BC5.1
BC-LTS
Legion of the Bouncy Castle Inc.
2 CVEs0 on KEV0 new
BC7.5
BCPIX-LTS
Legion of the Bouncy Castle Inc.
1 CVEs0 on KEV0 new
BC7.5
BCPKIX-FIPS
Legion of the Bouncy Castle Inc.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-71884 | BC BC-LTS-JAVA Legion of the Bouncy Castle Inc. | 8.2 | Oct 9 | Packet CTR reports a full success length after the counter is exhausted |
| CVE-2026-71890 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 8.7 | Oct 3 | MLS external commit can remove an arbitrary group member |
| CVE-2026-71891 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 7.1 | Oct 3 | BLS12-381 key validation accepts a public key built on a foreign curve |
| CVE-2026-18040 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 5.9 | Oct 3 | HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler |
| CVE-2026-71885 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 9.2 | Oct 3 | MLS X.509 credential not bound to the LeafNode signature key |
| CVE-2026-71886 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 8.2 | Oct 3 | OpenPGP certification accepted from a subkey without certification authority |
| CVE-2026-71887 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 8.2 | Oct 3 | OpenPGP data signature accepted from a signing subkey without cross-certification |
| CVE-2026-71883 | BC BC-LTS-JAVA Legion of the Bouncy Castle Inc. | 8.2 | Oct 3 | Native AES packet cipher returns the raw AES key on an alias |
| CVE-2026-71888 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 8.7 | Oct 3 | CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent |
| CVE-2026-71889 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 8.7 | Oct 3 | PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate |
| CVE-2026-71892 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 6.9 | Oct 3 | CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys |
| CVE-2026-85515 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 8.2 | Oct 3 | OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check |
| CVE-2026-97873 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 5.3 | Oct 3 | Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider |
| CVE-2026-18036 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 8.2 | Oct 2 | NTRU leaks private key information by reducing secret values with a non-constant-time integer division |
| CVE-2026-17508 | BC BC-LTS-JAVA Legion of the Bouncy Castle Inc. | 5.3 | Oct 2 | Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points |
| CVE-2026-17507 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Oct 2 | MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender |
| CVE-2026-103604 | BC bc-csharp Legion of the Bouncy Castle Inc. | 8.7 | Oct 2 | Quadratic-time escaping when converting X.509 distinguished names to strings |
| CVE-2026-103603 | BC bc-csharp Legion of the Bouncy Castle Inc. | 8.7 | Oct 2 | Unbounded HSS public key level count allows huge array allocation during signature verification |
| CVE-2026-103602 | BC bc-csharp Legion of the Bouncy Castle Inc. | 8.2 | Oct 2 | Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts |
| CVE-2026-103601 | BC bc-csharp Legion of the Bouncy Castle Inc. | 8.2 | Oct 2 | CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check |
| CVE-2026-103600 | BC bc-csharp Legion of the Bouncy Castle Inc. | 8.7 | Oct 2 | Unbounded ASN.1 nesting depth causes process-terminating stack overflow |
| CVE-2026-63578 | BC bc-csharp Legion of the Bouncy Castle Inc. | 7.1 | Oct 2 | Unbounded PBE iteration count when decrypting PKCS#8 private keys |
| CVE-2026-63577 | BC bc-csharp Legion of the Bouncy Castle Inc. | 8.2 | Oct 2 | Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix |
| CVE-2026-63576 | BC bc-csharp Legion of the Bouncy Castle Inc. | 8.2 | Oct 2 | URI name constraints checked against a mis-parsed host |
| CVE-2026-63575 | BC bc-csharp Legion of the Bouncy Castle Inc. | 7.1 | Oct 2 | PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count |
| CVE-2026-63574 | BC bc-csharp Legion of the Bouncy Castle Inc. | 8.7 | Oct 2 | Unbounded allocation from OpenPGP signature and user attribute subpacket lengths |
| CVE-2026-63573 | BC bc-csharp Legion of the Bouncy Castle Inc. | 8.2 | Oct 2 | Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap |
| CVE-2026-63572 | BC bc-csharp Legion of the Bouncy Castle Inc. | 7.1 | Oct 2 | Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files |
| CVE-2026-63571 | BC bc-csharp Legion of the Bouncy Castle Inc. | 8.7 | Oct 2 | Attribute certificate path validation does not verify the attribute certificate's signature |
| CVE-2026-63570 | BC bc-csharp Legion of the Bouncy Castle Inc. | 7.1 | Oct 2 | Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links |
| CVE-2026-63569 | BC bc-csharp Legion of the Bouncy Castle Inc. | 9.1 | Oct 2 | MTI/A0 DHAgreement does not validate the peer's ephemeral value |
| CVE-2026-63568 | BC bc-csharp Legion of the Bouncy Castle Inc. | 7.5 | Oct 2 | Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion |
| CVE-2026-63567 | BC bc-csharp Legion of the Bouncy Castle Inc. | 7.5 | Oct 2 | IesEngine block-cipher mode checks padding before MAC (CBC padding oracle) |
| CVE-2026-63566 | BC bc-csharp Legion of the Bouncy Castle Inc. | 7.5 | Oct 2 | DTLS handshake reassembler allocates buffer from unchecked 24-bit length |
| CVE-2026-16001 | BC bc-csharp Legion of the Bouncy Castle Inc. | 7.5 | Oct 2 | IesEngine stream-mode MAC forgery via length-dependent KDF split |
| CVE-2026-16000 | BC bc-csharp Legion of the Bouncy Castle Inc. | 7.5 | Oct 2 | KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used |
| CVE-2026-15999 | BC bc-csharp Legion of the Bouncy Castle Inc. | 7.5 | Oct 2 | AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication |
| CVE-2026-13505 | BC BC-FJA Legion of the Bouncy Castle Inc. | 8.7 | Aug 8 | Zeroisation of sensitive key material on garbage collection relies on finalization |
| CVE-2026-8798 | BC BC-FJA Legion of the Bouncy Castle Inc. | 8.7 | Aug 8 | Native entropy source retries the CPU entropy instructions without limit |
| CVE-2026-13586 | BC BC-FJA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) |
| CVE-2026-13506 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | Lazy ASN.1 sequence forcing resets nesting-depth guard |
| CVE-2026-12860 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 5.3 | Aug 3 | RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path |
| CVE-2026-12852 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | MLS wire decoder allocates attacker-declared opaque length before bounds check |
| CVE-2026-12817 | BC BC-FJA Legion of the Bouncy Castle Inc. | 8.6 | Aug 3 | OpenPGP AEAD decryption skips final tag on chunk-aligned data |
| CVE-2026-12816 | BC BC-LTS-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | IESEngine stream-mode MAC forgery via length-dependent KDF split |
| CVE-2026-12803 | BC BC-LTS-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) |
| CVE-2026-12802 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | CMS AuthEnvelopedData fails to enforce tag-length on decryption |
| CVE-2026-14682 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | Possible OOM from unbounded up-front allocation on a definite-length read |
| CVE-2026-58059 | BC BC-FJA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | Quadratic-time escaping when stringifying X.500 distinguished names |
| CVE-2026-58060 | BC BC-LTS-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | HSS public-key level count unbounded, enabling huge allocation on verify |
| CVE-2026-58061 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | CCM-family modes write plaintext to caller buffer before tag check |
| CVE-2026-58062 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 9.1 | Aug 3 | Stapled OCSP response accepted without binding to the checked certificate |
| CVE-2026-58063 | BC BC-FJA Legion of the Bouncy Castle Inc. | 5.3 | Aug 3 | BCFKS keystore load honours unbounded KDF cost from untrusted file |
| CVE-2026-59638 | BC BC-LTS-JAVA Legion of the Bouncy Castle Inc. | 6.5 | Aug 3 | JSSE hostname verifier CN-fallback enabled by default despite documented opt-in |
| CVE-2026-59639 | BC BC-FJA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | CMS verifySignatures returns true for SignedData with zero signers |
| CVE-2026-59640 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 5.3 | Aug 3 | OpenPGP CFB quick-check oracle active on symmetric/session-key paths |
| CVE-2026-59641 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 5.3 | Aug 3 | S/MIME validator trusts signer-asserted signingTime for path validation |
| CVE-2026-59642 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | CMS AuthenticatedData content not bound to MAC when authAttrs present |
| CVE-2026-59643 | BC BC-FJA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | OpenPGP inline-signature policy failures silently ignored |
| CVE-2026-59644 | BC BC-JAVA Legion of the Bouncy Castle Inc. | 7.5 | Aug 3 | MLS hash-ratchet honours arbitrary 32-bit generation counter from sender |