Product by Legion Of The Bouncy Castle Inc.
Bc-java
54 known vulnerabilities in Bc-java (Legion Of The Bouncy Castle Inc.), 0 of them actively exploited (CISA KEV).
Key figures
54
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-5598 | Legion of the Bouncy Castle BC-JAVA: Covert Timing Channel | 7.5 | |
| High | CVE-2026-59646 | DTLS handshake reassembler allocates buffer from unchecked 24-bit length | 7.5 | |
| High | CVE-2026-58060 | HSS public-key level count unbounded, enabling huge allocation on verify | 7.5 | |
| High | CVE-2026-3505 | Legion of the Bouncy Castle BC-JAVA: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2026-17507 | MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender | 7.5 | |
| High | CVE-2026-12852 | MLS wire decoder allocates attacker-declared opaque length before bounds check | 7.5 | |
| High | CVE-2026-13506 | Lazy ASN.1 sequence forcing resets nesting-depth guard | 7.5 | |
| High | CVE-2026-14682 | Possible OOM from unbounded up-front allocation on a definite-length read | 7.5 | |
| High | CVE-2026-58059 | Quadratic-time escaping when stringifying X.500 distinguished names | 7.5 | |
| High | CVE-2026-59649 | OpenPGP user-attribute subpacket length bounded only by JVM max memory | 7.5 | |
| High | CVE-2026-59644 | MLS hash-ratchet honours arbitrary 32-bit generation counter from sender | 7.5 | |
| Critical | CVE-2026-8763 | Name Constraints bypass via trailing dot in rfc822Name and URI | 9.1 | |
| High | CVE-2026-13586 | PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) | 7.5 | |
| High | CVE-2026-5588 | Legion of the Bouncy Castle BC-JAVA: Improper Verification of Cryptographic Signature | 7.5 | |
| Critical | CVE-2026-71885 | MLS X.509 credential not bound to the LeafNode signature key | — | |
| Critical | CVE-2026-58062 | Stapled OCSP response accepted without binding to the checked certificate | 9.1 | |
| High | CVE-2026-71890 | MLS external commit can remove an arbitrary group member | — | |
| High | CVE-2026-59645 | OER parser recurses without depth limit on self-referential IEEE 1609.2 schema | 7.5 | |
| High | CVE-2024-14041 | Legion of the Bouncy Castle BC-JAVA: Observable Timing Discrepancy | 5.9 | |
| Medium | CVE-2025-8885 | Possible DOS in processing specially formed ASN.1 Object Identifiers | — | |
| Critical | CVE-2026-59638 | JSSE hostname verifier CN-fallback enabled by default despite documented opt-in | 6.5 | |
| Critical | CVE-2026-59650 | MTI/A0 DH agreement exponentiates unvalidated peer value | 9.1 | |
| High | CVE-2026-18036 | Legion of the Bouncy Castle BC-JAVA: Observable Timing Discrepancy | — | |
| High | CVE-2026-71889 | PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate | — | |
| High | CVE-2026-71888 | CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent | — |