What’s Vulnerable › Products

Legion of the Bouncy Castle Inc. BC-FJA vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Legion of the Bouncy Castle Inc. BC-FJA version is affected

Latest Legion of the Bouncy Castle Inc. BC-FJA vulnerabilities

• CVE-2026-85515 — OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check (CVSS 8.2)
• CVE-2026-71892 — CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys (CVSS 6.9)
• CVE-2026-71889 — PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate (CVSS 8.7)
• CVE-2026-71888 — CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent (CVSS 8.7)
• CVE-2026-17508 — Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points (CVSS 5.3)
• CVE-2026-13505 — Zeroisation of sensitive key material on garbage collection relies on finalization (CVSS 8.7)
• CVE-2026-8798 — Native entropy source retries the CPU entropy instructions without limit (CVSS 8.7)
• CVE-2026-8149 — GCM chunking can lead to bad tag exception on decryption (CVSS 5.1)
• CVE-2025-8885 — Possible DOS in processing specially formed ASN.1 Object Identifiers (CVSS 6.3)
• CVE-2024-29857 — (CVSS 7.5)