Veille CVE

Recherche « Bouncycastle bcpg-fips »

5 CVE

Critique 0 Élevée 3 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Bouncycastle bcpg-fips » ✕
  1. CVE-2026-12817 8.6 Élevée

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).

  2. CVE-2026-59649 7.5 Élevée

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).

  3. CVE-2026-59648 5.3 Moyenne

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).

  4. CVE-2026-59643 7.5 Élevée

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java · Bouncycastle bcpg-fips

    In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.

  5. CVE-2026-59640 5.3 Moyenne

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).