Approved changes feed: RSS · Atom
cpe:2.3:a:legion_of_the_bouncy_castle_inc.:bc-java:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Legion Of The Bouncy Castle Inc. (e4a6587a-5507-5db2-9124-4805610f6129) |
|---|---|
| Product | Bc Java (1b806a8f-3c40-59e4-a6dc-c7b06288345d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-14041 |
vulnerable | 2026-09-16 04:47:05.345704 |
ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)
In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM (CRYSTALS-Kyber) routines divided secret-derived polynomial coefficients by the modulus q: Poly.toMsg, which decodes the decrypted message, and the ciphertext compression routines Poly.compressPoly and PolyVec.compressPolyVec. An attacker able to measure the timing of a large number of decapsulations performed with the same long-term private key can recover that key. These are the KyberSlash1 (Poly.toMsg) and KyberSlash2 (ciphertext compression) divisions. Compression performed during encapsulation operates on values that become the public ciphertext and is not affected.
Published: 2026-07-28T08:05:35.310Z
Updated: 2026-08-09T20:56:37.119Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14682 |
vulnerable | 2026-09-16 04:33:12.143999 |
Possible OOM from unbounded up-front allocation on a definite-length read
In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), and before bctls-fips 1.0.24.
Published: 2026-08-03T02:44:13.256Z
Updated: 2026-08-04T09:24:50.033Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15055 |
vulnerable | 2026-09-16 04:33:06.185759 |
PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).
Published: 2026-08-03T00:32:51.477Z
Updated: 2026-08-03T13:28:42.844Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8763 |
vulnerable | 2026-09-16 04:32:57.931830 |
Name Constraints bypass via trailing dot in rfc822Name and URI
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
Published: 2026-08-03T00:36:05.088Z
Updated: 2026-10-05T01:16:57.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12852 |
vulnerable | 2026-09-16 04:32:51.531369 |
MLS wire decoder allocates attacker-declared opaque length before bounds check
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
Published: 2026-08-03T02:55:02.485Z
Updated: 2026-08-03T15:11:39.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12860 |
vulnerable | 2026-09-16 04:32:51.239327 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12802 |
vulnerable | 2026-09-16 04:32:51.158899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12816 |
vulnerable | 2026-09-16 04:32:51.071897 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12817 |
vulnerable | 2026-09-16 04:32:50.952882 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12185 |
vulnerable | 2026-09-16 04:32:50.843617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12803 |
vulnerable | 2026-09-16 04:32:50.714711 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13506 |
vulnerable | 2026-09-16 04:32:50.298978 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13586 |
vulnerable | 2026-09-16 04:32:49.974574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59644 |
vulnerable | 2026-09-16 04:32:47.340564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59640 |
vulnerable | 2026-09-16 04:32:47.320003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59650 |
vulnerable | 2026-09-16 04:32:47.215940 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59648 |
vulnerable | 2026-09-16 04:32:47.071704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59651 |
vulnerable | 2026-09-16 04:32:46.954134 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59649 |
vulnerable | 2026-09-16 04:32:46.943689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59645 |
vulnerable | 2026-09-16 04:32:46.920497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59641 |
vulnerable | 2026-09-16 04:32:46.882090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59647 |
vulnerable | 2026-09-16 04:32:46.805608 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59639 |
vulnerable | 2026-09-16 04:32:46.789689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59643 |
vulnerable | 2026-09-16 04:32:46.783774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59646 |
vulnerable | 2026-09-16 04:32:46.740346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59638 |
vulnerable | 2026-09-16 04:32:46.719965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59642 |
vulnerable | 2026-09-16 04:32:46.707075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59652 |
vulnerable | 2026-09-16 04:32:46.527891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58060 |
vulnerable | 2026-09-16 04:32:42.999480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58059 |
vulnerable | 2026-09-16 04:32:42.914955 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58061 |
vulnerable | 2026-09-16 04:32:42.777310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58063 |
vulnerable | 2026-09-16 04:32:42.616568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58062 |
vulnerable | 2026-09-16 04:32:42.513746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5598 |
vulnerable | 2026-06-08 08:07:03.883986 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5588 |
vulnerable | 2026-06-08 08:07:03.876504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3505 |
vulnerable | 2026-06-08 08:01:18.873611 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0636 |
vulnerable | 2026-06-08 07:47:12.826778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14813 |
vulnerable | 2026-06-08 07:06:35.184477 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.