# Legion of the Bouncy Castle Inc. bc-csharp.

Every CVE that names Legion of the Bouncy Castle Inc. bc-csharp among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Quadratic-time escaping when converting X.509 distinguished names to strings](https://agentprime.io/advisories/CVE-2026-103604.md)
  `CVE-2026-103604` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Unbounded HSS public key level count allows huge array allocation during signature verification](https://agentprime.io/advisories/CVE-2026-103603.md)
  `CVE-2026-103603` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts](https://agentprime.io/advisories/CVE-2026-103602.md)
  `CVE-2026-103602` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Weak cryptography or TLS
- [CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check](https://agentprime.io/advisories/CVE-2026-103601.md)
  `CVE-2026-103601` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-354
- [Unbounded ASN.1 nesting depth causes process-terminating stack overflow](https://agentprime.io/advisories/CVE-2026-103600.md)
  `CVE-2026-103600` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Unbounded PBE iteration count when decrypting PKCS#8 private keys](https://agentprime.io/advisories/CVE-2026-63578.md)
  `CVE-2026-63578` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix](https://agentprime.io/advisories/CVE-2026-63577.md)
  `CVE-2026-63577` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Weak cryptography or TLS
- [URI name constraints checked against a mis-parsed host](https://agentprime.io/advisories/CVE-2026-63576.md)
  `CVE-2026-63576` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Weak cryptography or TLS
- [PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count](https://agentprime.io/advisories/CVE-2026-63575.md)
  `CVE-2026-63575` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Unbounded allocation from OpenPGP signature and user attribute subpacket lengths](https://agentprime.io/advisories/CVE-2026-63574.md)
  `CVE-2026-63574` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap](https://agentprime.io/advisories/CVE-2026-63573.md)
  `CVE-2026-63573` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Information disclosure
- [Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files](https://agentprime.io/advisories/CVE-2026-63572.md)
  `CVE-2026-63572` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Attribute certificate path validation does not verify the attribute certificate's signature](https://agentprime.io/advisories/CVE-2026-63571.md)
  `CVE-2026-63571` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Weak cryptography or TLS
- [Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links](https://agentprime.io/advisories/CVE-2026-63570.md)
  `CVE-2026-63570` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [MTI/A0 DHAgreement does not validate the peer's ephemeral value](https://agentprime.io/advisories/CVE-2026-63569.md)
  `CVE-2026-63569` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-20
- [Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion](https://agentprime.io/advisories/CVE-2026-63568.md)
  `CVE-2026-63568` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)](https://agentprime.io/advisories/CVE-2026-63567.md)
  `CVE-2026-63567` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Information disclosure
- [DTLS handshake reassembler allocates buffer from unchecked 24-bit length](https://agentprime.io/advisories/CVE-2026-63566.md)
  `CVE-2026-63566` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [IesEngine stream-mode MAC forgery via length-dependent KDF split](https://agentprime.io/advisories/CVE-2026-16001.md)
  `CVE-2026-16001` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-354
- [KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used](https://agentprime.io/advisories/CVE-2026-16000.md)
  `CVE-2026-16000` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-325
- [AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication](https://agentprime.io/advisories/CVE-2026-15999.md)
  `CVE-2026-15999` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-354

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=legion-of-the-bouncy-castle-inc-bc-csharp>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/legion-of-the-bouncy-castle-inc-bc-csharp/>. Everything for agents: <https://agentprime.io/llms.txt>.