GHSA-g6rx-6wfx-gj74

ghsaUSosv

Bouncy Castle for Java has Out-of-Bounds Write Vulnerability

view advisory published 2025-08-22Licence: CC-BY-4.0

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-9340US	—	0.18% (7th)	—	2025-08-22
Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/b…

references

External citations — patches, advisories, analysis.

https://github.com/bcgit/bc-javaPACKAGE
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909340WEB
https://nvd.nist.gov/vuln/detail/CVE-2025-9340ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan