Legion of the Bouncy Castle Inc. BC-LTS-JAVA.

Packet CTR reports a full success length after the counter is exhausted

• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-323

Native AES packet cipher returns the raw AES key on an alias

• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Information disclosure

CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Weak cryptography or TLS

OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-345
• CWE-354

Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Weak cryptography or TLS

OpenPGP AEAD decryption skips final tag on chunk-aligned data

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

IESEngine stream-mode MAC forgery via length-dependent KDF split

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

CMS AuthEnvelopedData fails to enforce tag-length on decryption

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

Possible OOM from unbounded up-front allocation on a definite-length read

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

Quadratic-time escaping when stringifying X.500 distinguished names

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

HSS public-key level count unbounded, enabling huge allocation on verify

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

CCM-family modes write plaintext to caller buffer before tag check

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

Stapled OCSP response accepted without binding to the checked certificate

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Weak cryptography or TLS

BCFKS keystore load honours unbounded KDF cost from untrusted file

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

JSSE hostname verifier CN-fallback enabled by default despite documented opt-in

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Weak cryptography or TLS

CMS verifySignatures returns true for SignedData with zero signers

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Weak cryptography or TLS

OpenPGP CFB quick-check oracle active on symmetric/session-key paths

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Information disclosure

S/MIME validator trusts signer-asserted signingTime for path validation

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-345

CMS AuthenticatedData content not bound to MAC when authAttrs present

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-354

OER parser recurses without depth limit on self-referential IEEE 1609.2 schema

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

DTLS handshake reassembler allocates buffer from unchecked 24-bit length

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

CRMF/CMP password-MAC honours unbounded iteration count

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

OpenPGP Argon2 S2K honours attacker-chosen memory and passes

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

OpenPGP user-attribute subpacket length bounded only by JVM max memory

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

MTI/A0 DH agreement exponentiates unvalidated peer value

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-20

BKS keystore accepts legacy version with 16-bit integrity MAC key

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Weak cryptography or TLS

BKS/UBER keystore allocates from untrusted lengths before integrity check

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service

PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input

• Legion of the Bouncy Castle Inc. BC-JAVA
• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• Denial of service