Product by Legion of the Bouncy Castle
Bouncy Castle for Java LTS (bc-lts-java)
28 known vulnerabilities in Bouncy Castle for Java LTS (bc-lts-java) (Legion of the Bouncy Castle), 0 of them actively exploited (CISA KEV).
Key figures
28
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-58060 | HSS public-key level count unbounded, enabling huge allocation on verify | 7.5 | |
| High | CVE-2026-59646 | DTLS handshake reassembler allocates buffer from unchecked 24-bit length | 7.5 | |
| High | CVE-2026-59649 | OpenPGP user-attribute subpacket length bounded only by JVM max memory | 7.5 | |
| High | CVE-2026-13506 | Lazy ASN.1 sequence forcing resets nesting-depth guard | 7.5 | |
| High | CVE-2026-14682 | Possible OOM from unbounded up-front allocation on a definite-length read | 7.5 | |
| High | CVE-2026-58059 | Quadratic-time escaping when stringifying X.500 distinguished names | 7.5 | |
| Critical | CVE-2026-8763 | Name Constraints bypass via trailing dot in rfc822Name and URI | 9.1 | |
| High | CVE-2026-13586 | PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) | 7.5 | |
| Critical | CVE-2026-58062 | Stapled OCSP response accepted without binding to the checked certificate | 9.1 | |
| High | CVE-2026-59645 | OER parser recurses without depth limit on self-referential IEEE 1609.2 schema | 7.5 | |
| Critical | CVE-2026-59638 | JSSE hostname verifier CN-fallback enabled by default despite documented opt-in | 6.5 | |
| Critical | CVE-2026-59650 | MTI/A0 DH agreement exponentiates unvalidated peer value | 9.1 | |
| High | CVE-2026-59640 | OpenPGP CFB quick-check oracle active on symmetric/session-key paths | 5.3 | |
| High | CVE-2026-59642 | CMS AuthenticatedData content not bound to MAC when authAttrs present | 7.5 | |
| High | CVE-2026-15055 | PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input | 8.2 | |
| High | CVE-2026-58061 | CCM-family modes write plaintext to caller buffer before tag check | 7.5 | |
| High | CVE-2026-12185 | BKS/UBER keystore allocates from untrusted lengths before integrity check | 8.6 | |
| High | CVE-2026-59639 | CMS verifySignatures returns true for SignedData with zero signers | 7.5 | |
| High | CVE-2026-12803 | KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) | 7.5 | |
| Medium | CVE-2026-59647 | CRMF/CMP password-MAC honours unbounded iteration count | 5.3 | |
| Medium | CVE-2026-59648 | OpenPGP Argon2 S2K honours attacker-chosen memory and passes | 5.3 | |
| High | CVE-2026-12802 | CMS AuthEnvelopedData fails to enforce tag-length on decryption | 7.5 | |
| High | CVE-2026-12816 | IESEngine stream-mode MAC forgery via length-dependent KDF split | 7.5 | |
| High | CVE-2026-59641 | S/MIME validator trusts signer-asserted signingTime for path validation | 5.3 | |
| High | CVE-2026-12817 | OpenPGP AEAD decryption skips final tag on chunk-aligned data | 8.6 |