What’s Vulnerable › Products

Legion of the Bouncy Castle Inc. bc-csharp vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 21 published in the last 12 months.

Check whether your Legion of the Bouncy Castle Inc. bc-csharp version is affected

Latest Legion of the Bouncy Castle Inc. bc-csharp vulnerabilities

• CVE-2026-63578 — Unbounded PBE iteration count when decrypting PKCS#8 private keys (CVSS 7.5)
• CVE-2026-63577 — Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix (CVSS 7.5)
• CVE-2026-63576 — URI name constraints checked against a mis-parsed host (CVSS 7.5)
• CVE-2026-63575 — PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count (CVSS 7.5)
• CVE-2026-63574 — Unbounded allocation from OpenPGP signature and user attribute subpacket lengths (CVSS 7.5)
• CVE-2026-63573 — Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap (CVSS 7.5)
• CVE-2026-63572 — Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files (CVSS 7.5)
• CVE-2026-63571 — Attribute certificate path validation does not verify the attribute certificate's signature (CVSS 7.5)
• CVE-2026-63570 — Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links (CVSS 7.5)
• CVE-2026-103604 — Quadratic-time escaping when converting X.509 distinguished names to strings (CVSS 7.5)
• CVE-2026-103603 — Unbounded HSS public key level count allows huge array allocation during signature verification (CVSS 7.5)
• CVE-2026-103602 — Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts (CVSS 5.3)
• CVE-2026-103601 — CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check (CVSS 7.5)
• CVE-2026-103600 — Unbounded ASN.1 nesting depth causes process-terminating stack overflow (CVSS 7.5)
• CVE-2026-63569 — MTI/A0 DHAgreement does not validate the peer's ephemeral value (CVSS 6.5)
• CVE-2026-63568 — Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion (CVSS 7.5)
• CVE-2026-63567 — IesEngine block-cipher mode checks padding before MAC (CBC padding oracle) (CVSS 7.5)
• CVE-2026-63566 — DTLS handshake reassembler allocates buffer from unchecked 24-bit length (CVSS 7.5)
• CVE-2026-16001 — IesEngine stream-mode MAC forgery via length-dependent KDF split (CVSS 7.5)
• CVE-2026-16000 — KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used (CVSS 7.5)
• CVE-2026-15999 — AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication (CVSS 7.5)
• CVE-2020-15522 — (CVSS 5.9)