Product by Legion of the Bouncy Castle

    Bouncy Castle Bctls-fips

    3 known vulnerabilities in Bouncy Castle Bctls-fips (Legion of the Bouncy Castle), 0 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Bouncy Castle Bctls-fips (Legion of the Bouncy Castle)
    HighCVE-2026-59646

    DTLS handshake reassembler allocates buffer from unchecked 24-bit length

    also in 7 other products

    		7.5
    HighCVE-2026-14682

    Possible OOM from unbounded up-front allocation on a definite-length read

    also in 10 other products

    		7.5
    CriticalCVE-2026-59638

    JSSE hostname verifier CN-fallback enabled by default despite documented opt-in

    also in 7 other products

    		6.5

    All products by Legion of the Bouncy Castle