DeutschShown in its original language — a full translation is planned for a future version.
Bouncy Castle: Mehrere Schwachstellen
view advisory published 2026-08-02
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Bouncy Castle ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
01
describes (32)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-14682US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12,… | ||||
| CVE-2026-13586US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy… | ||||
| CVE-2026-13506US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle… | ||||
| CVE-2026-12860US | medium5.3 | — | ||
In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12. | ||||
| CVE-2026-12852US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check. | ||||
| CVE-2026-12817US | high8.6 | — | ||
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy… | ||||
| CVE-2026-12816US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12. | ||||
| CVE-2026-12803US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS bef… | ||||
| CVE-2026-12802US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bounc… | ||||
| CVE-2026-58063US | medium5.3 | — | ||
In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bo… | ||||
| CVE-2026-58062US | critical9.1 | Exploit | ||
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12,… | ||||
| CVE-2026-58061US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bo… | ||||
| CVE-2026-58060US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12,… | ||||
| CVE-2026-58059US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and B… | ||||
| CVE-2026-8763US | critical9.1 | — | ||
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy… | ||||
| CVE-2026-59652US | medium6.5 | — | ||
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper. | ||||
| CVE-2026-59651US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12. | ||||
| CVE-2026-59650US | critical9.1 | — | ||
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12. | ||||
| CVE-2026-59649US | high7.5 | — | ||
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, an… | ||||
| CVE-2026-59648US | medium5.3 | — | ||
In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy C… | ||||
showing 20 of 32
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:69440 vom 2026-09-21external
- Red Hat Security Advisory RHSA-2026:69470 vom 2026-09-21external
- Red Hat Security Advisory RHSA-2026:70228 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70229 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70230 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70257 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70277 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:71675 vom 2026-09-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan