What’s Vulnerable › Products
Legion of the Bouncy Castle Inc. BC-JAVA vulnerabilities
72 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 52 published in the last 12 months.
Check whether your Legion of the Bouncy Castle Inc. BC-JAVA version is affected
Latest Legion of the Bouncy Castle Inc. BC-JAVA vulnerabilities
- CVE-2026-97873 — Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider (CVSS 5.3)
- CVE-2026-85515 — OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check (CVSS 8.2)
- CVE-2026-71892 — CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys (CVSS 6.9)
- CVE-2026-71891 — BLS12-381 key validation accepts a public key built on a foreign curve (CVSS 7.1)
- CVE-2026-71890 — MLS external commit can remove an arbitrary group member (CVSS 8.7)
- CVE-2026-71889 — PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate (CVSS 8.7)
- CVE-2026-71888 — CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent (CVSS 8.7)
- CVE-2026-71887 — OpenPGP data signature accepted from a signing subkey without cross-certification (CVSS 8.2)
- CVE-2026-71886 — OpenPGP certification accepted from a subkey without certification authority (CVSS 8.2)
- CVE-2026-71885 — MLS X.509 credential not bound to the LeafNode signature key (CVSS 9.2)
- CVE-2026-18040 — HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler (CVSS 5.9)
- CVE-2026-18036 — NTRU leaks private key information by reducing secret values with a non-constant-time integer division (CVSS 8.2)
- CVE-2026-17508 — Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points (CVSS 5.3)
- CVE-2026-17507 — MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender (CVSS 7.5)
- CVE-2026-14682 — Possible OOM from unbounded up-front allocation on a definite-length read (CVSS 7.5)
- CVE-2026-13586 — PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) (CVSS 7.5)
- CVE-2026-13506 — Lazy ASN.1 sequence forcing resets nesting-depth guard (CVSS 7.5)
- CVE-2026-12860 — RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path (CVSS 5.3)
- CVE-2026-12852 — MLS wire decoder allocates attacker-declared opaque length before bounds check (CVSS 7.5)
- CVE-2026-12817 — OpenPGP AEAD decryption skips final tag on chunk-aligned data (CVSS 8.6)
- CVE-2026-12816 — IESEngine stream-mode MAC forgery via length-dependent KDF split (CVSS 7.5)
- CVE-2026-12803 — KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) (CVSS 7.5)
- CVE-2026-12802 — CMS AuthEnvelopedData fails to enforce tag-length on decryption (CVSS 7.5)
- CVE-2026-58063 — BCFKS keystore load honours unbounded KDF cost from untrusted file (CVSS 5.3)
- CVE-2026-58062 — Stapled OCSP response accepted without binding to the checked certificate (CVSS 9.1)