What’s Vulnerable › Products
Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS vulnerabilities
30 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 30 published in the last 12 months.
Check whether your Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS version is affected
Latest Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS vulnerabilities
- CVE-2026-14682 — Possible OOM from unbounded up-front allocation on a definite-length read (CVSS 7.5)
- CVE-2026-13586 — PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) (CVSS 7.5)
- CVE-2026-13506 — Lazy ASN.1 sequence forcing resets nesting-depth guard (CVSS 7.5)
- CVE-2026-12860 — RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path (CVSS 5.3)
- CVE-2026-12817 — OpenPGP AEAD decryption skips final tag on chunk-aligned data (CVSS 8.6)
- CVE-2026-12816 — IESEngine stream-mode MAC forgery via length-dependent KDF split (CVSS 7.5)
- CVE-2026-12803 — KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) (CVSS 7.5)
- CVE-2026-12802 — CMS AuthEnvelopedData fails to enforce tag-length on decryption (CVSS 7.5)
- CVE-2026-58063 — BCFKS keystore load honours unbounded KDF cost from untrusted file (CVSS 5.3)
- CVE-2026-58062 — Stapled OCSP response accepted without binding to the checked certificate (CVSS 9.1)
- CVE-2026-58061 — CCM-family modes write plaintext to caller buffer before tag check (CVSS 7.5)
- CVE-2026-58060 — HSS public-key level count unbounded, enabling huge allocation on verify (CVSS 7.5)
- CVE-2026-58059 — Quadratic-time escaping when stringifying X.500 distinguished names (CVSS 7.5)
- CVE-2026-8763 — Name Constraints bypass via trailing dot in rfc822Name and URI (CVSS 9.1)
- CVE-2026-59651 — BKS keystore accepts legacy version with 16-bit integrity MAC key (CVSS 7.5)
- CVE-2026-59650 — MTI/A0 DH agreement exponentiates unvalidated peer value (CVSS 9.1)
- CVE-2026-59649 — OpenPGP user-attribute subpacket length bounded only by JVM max memory (CVSS 7.5)
- CVE-2026-59648 — OpenPGP Argon2 S2K honours attacker-chosen memory and passes (CVSS 5.3)
- CVE-2026-59647 — CRMF/CMP password-MAC honours unbounded iteration count (CVSS 5.3)
- CVE-2026-59646 — DTLS handshake reassembler allocates buffer from unchecked 24-bit length (CVSS 7.5)
- CVE-2026-59645 — OER parser recurses without depth limit on self-referential IEEE 1609.2 schema (CVSS 7.5)
- CVE-2026-59642 — CMS AuthenticatedData content not bound to MAC when authAttrs present (CVSS 7.5)
- CVE-2026-59641 — S/MIME validator trusts signer-asserted signingTime for path validation (CVSS 5.3)
- CVE-2026-59640 — OpenPGP CFB quick-check oracle active on symmetric/session-key paths (CVSS 5.3)
- CVE-2026-59639 — CMS verifySignatures returns true for SignedData with zero signers (CVSS 7.5)