Advisories · Technology

Legion of the Bouncy Castle Inc. BC-JAVA.

Every CVE that names Legion of the Bouncy Castle Inc. BC-JAVA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-71890 CVE record

CVSS 8.7 High

MLS external commit can remove an arbitrary group member
- Legion of the Bouncy Castle Inc. BC-JAVA
- Broken access control
Not analysed yet 3 Oct 2026
CVE-2026-71891 CVE record

CVSS 7.1 High

BLS12-381 key validation accepts a public key built on a foreign curve
- Legion of the Bouncy Castle Inc. BC-JAVA
- Weak cryptography or TLS
Not analysed yet 3 Oct 2026
CVE-2026-18040 CVE record

CVSS 5.9 Medium

HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler
- Legion of the Bouncy Castle Inc. BC-JAVA
- CWE-208
Not analysed yet 3 Oct 2026
CVE-2026-71885 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

MLS X.509 credential not bound to the LeafNode signature key
- Legion of the Bouncy Castle Inc. BC-JAVA
- Authentication bypass
- Weak cryptography or TLS
Not analysed yet 3 Oct 2026
CVE-2026-71886 CVE record

CVSS 8.2 High

OpenPGP certification accepted from a subkey without certification authority
- Legion of the Bouncy Castle Inc. BC-JAVA
- Broken access control
Not analysed yet 3 Oct 2026
CVE-2026-71887 CVE record

CVSS 8.2 High

OpenPGP data signature accepted from a signing subkey without cross-certification
- Legion of the Bouncy Castle Inc. BC-JAVA
- Weak cryptography or TLS
- CWE-345
Not analysed yet 3 Oct 2026
CVE-2026-71888 CVE record

CVSS 8.7 High

CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
Not analysed yet 3 Oct 2026
CVE-2026-71889 CVE record

CVSS 8.7 High

PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Weak cryptography or TLS
Not analysed yet 3 Oct 2026
CVE-2026-71892 CVE record

CVSS 6.9 Medium

CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-FJA
- CWE-697
Not analysed yet 3 Oct 2026
CVE-2026-85515 CVE record

CVSS 8.2 High

OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-345
- CWE-354
Not analysed yet 3 Oct 2026
CVE-2026-97873 CVE record

CVSS 5.3 Medium

Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Oct 2026
CVE-2026-18036 CVE record

CVSS 8.2 High

NTRU leaks private key information by reducing secret values with a non-constant-time integer division
- Legion of the Bouncy Castle Inc. BC-JAVA
- CWE-208
Not analysed yet 2 Oct 2026
CVE-2026-17508 CVE record

CVSS 5.3 Medium

Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 2 Oct 2026
CVE-2026-17507 CVE record

CVSS 8.7 High

MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender
- Legion of the Bouncy Castle Inc. BC-JAVA
- CWE-195
Not analysed yet 2 Oct 2026
CVE-2026-13586 CVE record

CVSS 5.3 Medium

PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-12860 CVE record

CVSS 8.7 High

RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Weak cryptography or TLS
Not analysed yet 3 Aug 2026
CVE-2026-12852 CVE record

CVSS 8.7 High

MLS wire decoder allocates attacker-declared opaque length before bounds check
- Legion of the Bouncy Castle Inc. BC-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-12817 CVE record

CVSS 8.7 High

OpenPGP AEAD decryption skips final tag on chunk-aligned data
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
Not analysed yet 3 Aug 2026
CVE-2026-12816 CVE record

CVSS 8.7 High

IESEngine stream-mode MAC forgery via length-dependent KDF split
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
Not analysed yet 3 Aug 2026
CVE-2026-12803 CVE record

CVSS 8.7 High

KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
Not analysed yet 3 Aug 2026
CVE-2026-12802 CVE record

CVSS 8.7 High

CMS AuthEnvelopedData fails to enforce tag-length on decryption
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
Not analysed yet 3 Aug 2026
CVE-2026-14682 CVE record

CVSS 8.7 High

Possible OOM from unbounded up-front allocation on a definite-length read
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-58059 CVE record

CVSS 8.7 High

Quadratic-time escaping when stringifying X.500 distinguished names
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-58060 CVE record

CVSS 8.7 High

HSS public-key level count unbounded, enabling huge allocation on verify
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-58061 CVE record

CVSS 8.7 High

CCM-family modes write plaintext to caller buffer before tag check
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
Not analysed yet 3 Aug 2026
CVE-2026-58062 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Stapled OCSP response accepted without binding to the checked certificate
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Weak cryptography or TLS
Not analysed yet 3 Aug 2026
CVE-2026-58063 CVE record

CVSS 5.3 Medium

BCFKS keystore load honours unbounded KDF cost from untrusted file
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-59638 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Weak cryptography or TLS
Not analysed yet 3 Aug 2026
CVE-2026-59639 CVE record

CVSS 8.7 High

CMS verifySignatures returns true for SignedData with zero signers
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Weak cryptography or TLS
Not analysed yet 3 Aug 2026
CVE-2026-59640 CVE record

CVSS 8.7 High

OpenPGP CFB quick-check oracle active on symmetric/session-key paths
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Information disclosure
Not analysed yet 3 Aug 2026
CVE-2026-59641 CVE record

CVSS 8.7 High

S/MIME validator trusts signer-asserted signingTime for path validation
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-345
Not analysed yet 3 Aug 2026
CVE-2026-59642 CVE record

CVSS 8.7 High

CMS AuthenticatedData content not bound to MAC when authAttrs present
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-354
Not analysed yet 3 Aug 2026
CVE-2026-59643 CVE record

CVSS 8.7 High

OpenPGP inline-signature policy failures silently ignored
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-FJA
- Weak cryptography or TLS
Not analysed yet 3 Aug 2026
CVE-2026-59644 CVE record

CVSS 8.7 High

MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
- Legion of the Bouncy Castle Inc. BC-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-59645 CVE record

CVSS 8.7 High

OER parser recurses without depth limit on self-referential IEEE 1609.2 schema
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-59646 CVE record

CVSS 8.7 High

DTLS handshake reassembler allocates buffer from unchecked 24-bit length
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-59647 CVE record

CVSS 6.9 Medium

CRMF/CMP password-MAC honours unbounded iteration count
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-59648 CVE record

CVSS 6.9 Medium

OpenPGP Argon2 S2K honours attacker-chosen memory and passes
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-59649 CVE record

CVSS 8.7 High

OpenPGP user-attribute subpacket length bounded only by JVM max memory
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-59650 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

MTI/A0 DH agreement exponentiates unvalidated peer value
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- CWE-20
Not analysed yet 3 Aug 2026
CVE-2026-59651 CVE record

CVSS 7.1 High

BKS keystore accepts legacy version with 16-bit integrity MAC key
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Weak cryptography or TLS
Not analysed yet 3 Aug 2026
CVE-2026-59652 CVE record

CVSS 6.9 Medium

LDAP filter injection in legacy jdk1.4 LDAPStoreHelper
- Legion of the Bouncy Castle Inc. BC-JAVA
- Other injection
Not analysed yet 3 Aug 2026
CVE-2026-12185 CVE record

CVSS 7.1 High

BKS/UBER keystore allocates from untrusted lengths before integrity check
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2026-15055 CVE record

CVSS 5.3 Medium

PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input
- Legion of the Bouncy Castle Inc. BC-JAVA
- Legion of the Bouncy Castle Inc. BC-LTS-JAVA
- Denial of service
Not analysed yet 3 Aug 2026
CVE-2024-14041 CVE record

CVSS 8.2 High

ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)
- Legion of the Bouncy Castle Inc. BC-JAVA
- CWE-208
Not analysed yet 28 Jul 2026