What’s Vulnerable › Products

Legion of the Bouncy Castle Inc. Bouncy Castle for Java vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Legion of the Bouncy Castle Inc. Bouncy Castle for Java version is affected

Latest Legion of the Bouncy Castle Inc. Bouncy Castle for Java vulnerabilities

• CVE-2025-9340 — native encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output. (CVSS 0.0)
• CVE-2024-30171 — (CVSS 5.9)
• CVE-2023-33202 — (CVSS 5.5)