Vendor
Legion of the Bouncy Castle
80 known vulnerabilities in products by Legion of the Bouncy Castle, 0 of them actively exploited (CISA KEV).
Key figures
80
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-1000613 | Oracle Communications Diameter Signaling Router (DSR): Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2017-13098 | BouncyCastle JCE TLS Bleichenbacher/ROBOT | 7.5 | |
| High | CVE-2020-28052 | Oracle Utilities Framework: security vulnerability | 8.1 | |
| High | CVE-2019-17359 | Apache Software Foundation TomEE: security vulnerability | 7.5 | |
| High | CVE-2018-1000180 | Oracle Business Process Management Suite: security vulnerability | 7.5 | |
| High | CVE-2016-1000343 | Legion of the Bouncy Castle BC-JAVA: security vulnerability | 7.5 | |
| High | CVE-2016-1000340 | Legion of the Bouncy Castle BC-JAVA: security vulnerability | 7.5 | |
| High | CVE-2016-1000352 | Legion of the Bouncy Castle BC-JAVA: security vulnerability | 7.4 | |
| High | CVE-2016-1000344 | Legion of the Bouncy Castle BC-JAVA: security vulnerability | 7.4 | |
| High | CVE-2026-103603 | Unbounded HSS public key level count allows huge array allocation during signature verification | 7.5 | |
| Medium | CVE-2016-1000345 | Legion of the Bouncy Castle BC-JAVA: security vulnerability | 5.9 | |
| Medium | CVE-2016-1000341 | Legion of the Bouncy Castle BC-JAVA: security vulnerability | 5.9 | |
| High | CVE-2016-1000342 | Legion of the Bouncy Castle BC-JAVA: security vulnerability | 7.5 | |
| High | CVE-2016-1000338 | Legion of the Bouncy Castle Legion-of-the-bouncy-castle-java-crytography-api: security vulnerability | 7.5 | |
| Medium | CVE-2016-1000339 | Legion of the Bouncy Castle BC-JAVA: security vulnerability | 5.3 | |
| High | CVE-2026-58060 | HSS public-key level count unbounded, enabling huge allocation on verify | 7.5 | |
| High | CVE-2026-63566 | DTLS handshake reassembler allocates buffer from unchecked 24-bit length | 7.5 | |
| High | CVE-2026-63574 | Unbounded allocation from OpenPGP signature and user attribute subpacket lengths | 7.5 | |
| High | CVE-2026-17507 | MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender | 7.5 | |
| High | CVE-2026-63567 | IesEngine block-cipher mode checks padding before MAC (CBC padding oracle) | 7.5 | |
| High | CVE-2026-63568 | Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion | 7.5 | |
| Critical | CVE-2026-63569 | MTI/A0 DHAgreement does not validate the peer's ephemeral value | 6.5 | |
| High | CVE-2026-103600 | Unbounded ASN.1 nesting depth causes process-terminating stack overflow | 7.5 | |
| High | CVE-2026-59644 | MLS hash-ratchet honours arbitrary 32-bit generation counter from sender | 7.5 | |
| High | CVE-2026-59649 | OpenPGP user-attribute subpacket length bounded only by JVM max memory | 7.5 |
Products
| Legion of the Bouncy Castle BC-JAVA | 53 | 0 |
| Bouncy Castle for Java LTS (bc-lts-java) | 28 | 0 |
| Bouncy Castle bc-csharp | 22 | 0 |
| Bouncy Castle FIPS Java API (BC-FJA) Fips Java Api | 14 | 0 |
| Bouncy Castle Bcpg-fips | 5 | 0 |
| Bouncy Castle Bcpkix-fips | 5 | 0 |
| Bouncy Castle Bctls-fips | 3 | 0 |