BCFKS keystore load honours unbounded KDF cost from untrusted file
Summary
| CVE | CVE-2026-58063 |
|---|---|
| State | PUBLISHED |
| Assigner | bcorg |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-08-03 03:16:45 UTC |
| Updated | 2026-09-02 14:34:30 UTC |
| Description | In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series). |
Risk And Classification
Primary CVSS: v4.0 5.3 MEDIUM from 91579145-5d7b-4cc5-b925-a0262ff19630
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
EPSS: 0.003290000 probability, percentile 0.254310000 (date 2026-08-08)
Problem Types: CWE-770 | CWE-770 CWE-770 Allocation of Resources Without Limits or Throttling
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 4.0 | 91579145-5d7b-4cc5-b925-a0262ff19630 | Secondary | 5.3 | MEDIUM | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/C... |
| 4.0 | CNA | CVSS | 5.3 | MEDIUM | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/U:Amber |
| 3.1 | [email protected] | Primary | 5.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
CVSS v4.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowAttack Requirements
NonePrivileges Required
NoneUser Interaction
PassiveConfidentiality
NoneIntegrity
NoneAvailability
LowSub Conf.
NoneSub Integrity
NoneSub Availability
NoneCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
LowCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Bouncycastle | Bc-java | All | All | All | All |
| Application | Bouncycastle | Bouncy Castle For Java Lts | All | All | All | All |
| Application | Bouncycastle | Fips Java Api | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Legion Of The Bouncy Castle Inc. | BC-JAVA | affected 1.85 maven | all |
| CNA | Legion Of The Bouncy Castle Inc. | BC-LTS-JAVA | affected 2.73.0 2.73.12 maven | all |
| CNA | Legion Of The Bouncy Castle Inc. | BC-FJA | affected 1.0.0 1.0.2.7 maven | all |
| CNA | Legion Of The Bouncy Castle Inc. | BC-FJA | affected 2.0.0 2.0.2 maven | all |
| CNA | Legion Of The Bouncy Castle Inc. | BC-FJA | affected 2.1.0 2.1.3 maven | all |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| github.com/bcgit/bc-java/commit/81737a56ef4489da1f849cf549df95e338ea6b06 | 91579145-5d7b-4cc5-b925-a0262ff19630 | github.com | Patch |
| github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058063 | 91579145-5d7b-4cc5-b925-a0262ff19630 | github.com | Third Party Advisory, Patch |
| github.com/bcgit/bc-java/wiki/CVE-2026-58063 | MITRE | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Alex Gaynor in collaboration with Claude and Anthropic Research (en)
There are currently no legacy QID mappings associated with this CVE.