Known Vulnerabilities for products from Bouncycastle
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Bouncycastle".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103604 json | Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.ValueTo... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-103603 json | Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legion of... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-103602 json | Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 all... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-103601 json | Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of the B... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-103600 json | Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc. bc-csharp ... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-97873 json | Not Provided | 2026-10-03 | 2026-10-05 | |
| CVE-2026-71892 json | Not Provided | 2026-10-03 | 2026-10-05 | |
| CVE-2026-71890 json | Not Provided | 2026-10-03 | 2026-10-05 | |
| CVE-2026-71889 json | Not Provided | 2026-10-03 | 2026-10-05 | |
| CVE-2026-63578 json | Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters) in Le... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-63577 json | Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree) in L... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-63576 json | Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-cs... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-63575 json | Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy Castle... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-63574 json | Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers (SignatureSubpacket... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-63573 json | Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) in Legion of ... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-63572 json | Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc. bc-... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-63571 json | Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator, also... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-63570 json | Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before ... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-63569 json | Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Castle I... | Not Provided | 2026-10-02 | 2026-10-28 |
| CVE-2026-63568 json | Allocation of resources without limits or throttling in the CMP/CRMF password-based MAC verifier (PKMacBuilder) in Legion of ... | Not Provided | 2026-10-02 | 2026-10-27 |
Known software with vulnerabilities from Bouncycastle
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Bouncycastle | Fips Java Api | 1.0.1 |
| Application | Bouncycastle | Legion-of-the-bouncy-castle | 1.00 |
| Application | Bouncycastle | Legion-of-the-bouncy-castle-c-cryptography-api | 0.0 |
| Application | Bouncycastle | Legion-of-the-bouncy-castle-c-crytography-api | 0.0 |
| Application | Bouncycastle | Legion-of-the-bouncy-castle-fips-java-api | 1.0.1.2 |
| Application | Bouncycastle | Legion-of-the-bouncy-castle-java-crytography-api | 1.01 |