Legion of the Bouncy Castle Inc. BC-JAVA
54 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-71890 | 1.73 – < 1.86 | MLS external commit can remove an arbitrary group member | HIGH 8.7 | 0.2 % | ||
| CVE-2026-71891 | 1.85 – < 1.86 | BLS12-381 key validation accepts a public key built on a foreign curve | HIGH 7.1 | 0.2 % | ||
| CVE-2026-18040 | 1.73 – < 1.86 | HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler | MEDIUM 5.9 | 0.1 % | ||
| CVE-2026-71885 | < 1.86 | MLS X.509 credential not bound to the LeafNode signature key | CRITICAL 9.2 | 0.2 % | ||
| CVE-2026-71886 | 1.81 – < 1.86 | OpenPGP certification accepted from a subkey without certification authority | HIGH 8.2 | 0.2 % | ||
| CVE-2026-71887 | 1.81 – < 1.86 | OpenPGP data signature accepted from a signing subkey without cross-certification | HIGH 8.2 | 0.1 % | ||
| CVE-2026-71888 | < 1.86 | CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent | HIGH 8.7 | 0.1 % | ||
| CVE-2026-71889 | < 1.86 | PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate | HIGH 8.7 | 0.2 % | ||
| CVE-2026-71892 | 1.78 – < 1.86 | CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-85515 | 1.74 – < 1.86 | OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check | HIGH 8.2 | 0.2 % | ||
| CVE-2026-97873 | < 1.86 | Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-18036 | 1.73 – < 1.86 | NTRU leaks private key information by reducing secret values with a non-constant-time integer division | HIGH 8.2 | 0.3 % | ||
| CVE-2026-17508 | < 1.86 | Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-17507 | 1.73 – < 1.86 | MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender | HIGH 8.7 | 0.4 % | ||
| CVE-2026-13586 | < 1.85 | PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) | MEDIUM 5.3 | 0.6 % | ||
| CVE-2026-13506 | < 1.85 | Lazy ASN.1 sequence forcing resets nesting-depth guard | HIGH 8.7 | 0.5 % | ||
| CVE-2026-12860 | < 1.85 | RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path | HIGH 8.7 | 0.2 % | ||
| CVE-2026-12852 | 1.73 – < 1.85 | MLS wire decoder allocates attacker-declared opaque length before bounds check | HIGH 8.7 | 0.5 % | ||
| CVE-2026-12817 | 1.74 – < 1.85 | OpenPGP AEAD decryption skips final tag on chunk-aligned data | HIGH 8.7 | 0.2 % | ||
| CVE-2026-12816 | < 1.85 | IESEngine stream-mode MAC forgery via length-dependent KDF split | HIGH 8.7 | 0.2 % | ||
| CVE-2026-12803 | < 1.85 | KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) | HIGH 8.7 | 0.2 % | ||
| CVE-2026-12802 | < 1.85 | CMS AuthEnvelopedData fails to enforce tag-length on decryption | HIGH 8.7 | 0.2 % | ||
| CVE-2026-14682 | < 1.85 | Possible OOM from unbounded up-front allocation on a definite-length read | HIGH 8.7 | 0.5 % | ||
| CVE-2026-58059 | < 1.85 | Quadratic-time escaping when stringifying X.500 distinguished names | HIGH 8.7 | 0.5 % | ||
| CVE-2026-58060 | 1.65 – < 1.85 | HSS public-key level count unbounded, enabling huge allocation on verify | HIGH 8.7 | 0.6 % | ||
| CVE-2026-58061 | < 1.85 | CCM-family modes write plaintext to caller buffer before tag check | HIGH 8.7 | 0.3 % | ||
| CVE-2026-58062 | 1.66 – < 1.85 | Stapled OCSP response accepted without binding to the checked certificate | CRITICAL 9.3 | 0.4 % | ||
| CVE-2026-58063 | < 1.85 | BCFKS keystore load honours unbounded KDF cost from untrusted file | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-59638 | 1.61 – < 1.85 | JSSE hostname verifier CN-fallback enabled by default despite documented opt-in | CRITICAL 9.3 | 0.3 % | ||
| CVE-2026-59639 | < 1.85 | CMS verifySignatures returns true for SignedData with zero signers | HIGH 8.7 | 0.2 % | ||
| CVE-2026-59640 | < 1.85 | OpenPGP CFB quick-check oracle active on symmetric/session-key paths | HIGH 8.7 | 0.3 % | ||
| CVE-2026-59641 | < 1.85 | S/MIME validator trusts signer-asserted signingTime for path validation | HIGH 8.7 | 0.2 % | ||
| CVE-2026-59642 | < 1.85 | CMS AuthenticatedData content not bound to MAC when authAttrs present | HIGH 8.7 | 0.3 % | ||
| CVE-2026-59643 | 1.81 – < 1.85 | OpenPGP inline-signature policy failures silently ignored | HIGH 8.7 | 0.2 % | ||
| CVE-2026-59644 | 1.73 – < 1.85 | MLS hash-ratchet honours arbitrary 32-bit generation counter from sender | HIGH 8.7 | 0.5 % | ||
| CVE-2026-59645 | 1.70 – < 1.85 | OER parser recurses without depth limit on self-referential IEEE 1609.2 schema | HIGH 8.7 | 0.4 % | ||
| CVE-2026-59646 | < 1.85 | DTLS handshake reassembler allocates buffer from unchecked 24-bit length | HIGH 8.7 | 0.5 % | ||
| CVE-2026-59647 | < 1.85 | CRMF/CMP password-MAC honours unbounded iteration count | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-59648 | 1.71 – < 1.85 | OpenPGP Argon2 S2K honours attacker-chosen memory and passes | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-59649 | < 1.85 | OpenPGP user-attribute subpacket length bounded only by JVM max memory | HIGH 8.7 | 0.5 % | ||
| CVE-2026-59650 | < 1.85 | MTI/A0 DH agreement exponentiates unvalidated peer value | CRITICAL 9.3 | 0.3 % | ||
| CVE-2026-59651 | < 1.85 | BKS keystore accepts legacy version with 16-bit integrity MAC key | HIGH 7.1 | 0.2 % | ||
| CVE-2026-59652 | < 1.85 | LDAP filter injection in legacy jdk1.4 LDAPStoreHelper | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-12185 | < 1.85 | BKS/UBER keystore allocates from untrusted lengths before integrity check | HIGH 7.1 | 0.3 % | ||
| CVE-2026-8763 | < 1.85 | Name Constraints bypass via trailing dot in rfc822Name and URI | CRITICAL 9.3 | 0.4 % | ||
| CVE-2026-15055 | < 1.85 | PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-14041 | 1.73 – < 1.78 | ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compress… | HIGH 8.2 | 0.5 % | ||
| CVE-2026-3505 | 1.74 – < 1.80.2 ; 1.81 – < 1.81.1 ; 1.82 – < 1.84 | Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion. | HIGH 8.7 | 0.8 % | ||
| CVE-2026-5588 | 1.67 – < 1.80.2 ; 1.81 – < 1.81.1 ; 1.82 – < 1.84 | PKIX draft CompositeVerifier accepts empty signature sequence as valid. | MEDIUM 6.3 | 0.8 % | ||
| CVE-2026-5598 | 1.71 – < 1.80.2 ; 1.81 – < 1.81.1 ; 1.82 – < 1.84 | Non-constant time comparisons risk private key leakage in FrodoKEM. | HIGH 8.9 | 0.9 % | ||
| CVE-2026-0636 | 1.74 – < 1.80.2 ; 1.81 – < 1.81.1 ; 1.82 – < 1.84 | LDAP Injection Vulnerability in LDAPStoreHelper.java | MEDIUM 5.5 | 0.5 % | ||
| CVE-2025-14813 | 1.59 – < 1.80.2 ; 1.81 – < 1.81.1 ; 1.82 – < 1.84 | GOSTCTR implementation unable to process more than 255 blocks correctly | CRITICAL 9.3 | 0.3 % | ||
| CVE-2025-8916 | 1.44 – 1.78 | Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer | MEDIUM 6.3 | 0.5 % | ||
| CVE-2025-8885 | 1.0 – 1.77 | Possible DOS in processing specially formed ASN.1 Object Identifiers | MEDIUM 6.3 | 0.5 % |