Product by Legion of the Bouncy Castle
Bouncy Castle FIPS Java API (BC-FJA) Bc-csharp
22 known vulnerabilities in Bouncy Castle FIPS Java API (BC-FJA) Bc-csharp (Legion of the Bouncy Castle), 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-103603 | Unbounded HSS public key level count allows huge array allocation during signature verification | 7.5 | |
| High | CVE-2026-63566 | DTLS handshake reassembler allocates buffer from unchecked 24-bit length | 7.5 | |
| High | CVE-2026-63574 | Unbounded allocation from OpenPGP signature and user attribute subpacket lengths | 7.5 | |
| High | CVE-2026-63567 | IesEngine block-cipher mode checks padding before MAC (CBC padding oracle) | 7.5 | |
| Critical | CVE-2026-63569 | MTI/A0 DHAgreement does not validate the peer's ephemeral value | 6.5 | |
| High | CVE-2026-63568 | Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion | 7.5 | |
| High | CVE-2026-103600 | Unbounded ASN.1 nesting depth causes process-terminating stack overflow | 7.5 | |
| High | CVE-2026-103604 | Quadratic-time escaping when converting X.509 distinguished names to strings | 7.5 | |
| High | CVE-2026-63578 | Unbounded PBE iteration count when decrypting PKCS#8 private keys | 7.5 | |
| High | CVE-2026-63572 | Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files | 7.5 | |
| High | CVE-2026-63573 | Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap | 7.5 | |
| High | CVE-2026-103601 | Legion of the Bouncy Castle Bc-csharp: Improper Validation of Integrity Check Value | 7.5 | |
| High | CVE-2026-16000 | KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used | 7.5 | |
| Medium | CVE-2020-15522 | Bouncy Castle FIPS Java API (BC-FJA) Fips Java Api: security vulnerability | 5.9 | |
| High | CVE-2026-63571 | Attribute certificate path validation does not verify the attribute certificate's signature | 7.5 | |
| High | CVE-2026-103602 | Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts | 5.3 | |
| High | CVE-2026-15999 | AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication | 7.5 | |
| High | CVE-2026-63576 | URI name constraints checked against a mis-parsed host | 7.5 | |
| High | CVE-2026-63577 | Legion of the Bouncy Castle Bc-csharp: Improper Certificate Validation | 7.5 | |
| High | CVE-2026-16001 | IesEngine stream-mode MAC forgery via length-dependent KDF split | 7.5 | |
| High | CVE-2026-63570 | Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links | 7.5 | |
| High | CVE-2026-63575 | PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count | 7.5 |