Bouncy Castle Java Distribution (bc-java) 1.63

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.63:*:*:*:*:*:*:*

part: a version: 1.63 update: *

VendorBouncycastle (8993aee6-be06-52a7-a5ab-9d1fe290e16e)
ProductLegion Of The Bouncy Castle Java Crytography Api (23612aff-08c3-5519-a1e0-8a869212f694)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bcgit/bc-csharp purl2cpe 2026-06-01 10:12:20.908743

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-17359 vulnerable 2026-06-03 14:39:56.179278 Details available
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.
Published: 2019-10-08T13:39:54.000Z
Updated: 2024-08-05T01:40:15.255Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.