Veille CVE

Recherche « Bouncycastle fips java api »

10 CVE

Critique 2 Élevée 6 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Bouncycastle fips java api » ✕
  1. CVE-2026-71892 6.9 Moyenne

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-FJA

    In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidation(true), never ran for a message using RFC 9709 content-encryption key derivation (id-alg-cek-hkdf-sha256). The branch that should have selected the actual content-encryption algorithm carried in the key derivation AlgorithmIdentifier's parameters compared the encrypted-key byte array against the id-alg-cek-hkdf-sha256 object identifier, a comparison between a byte array and an ASN1ObjectIdentifier that is false for every possible input, so the check fell through to a key-size lookup on the outer wrapper OID. That OID identifies a key-derivation construction rather than a cipher and has no registered key size, so the size comparison was skipped entirely. A key-transport EnvelopedData or AuthEnvelopedData whose transported, HKDF-derived content-encryption key did not match the key size of the advertised content-encryption algorithm was therefore accepted even with validation explicitly enabled, silently defeating the only mechanism the API offers for enforcing recovered key size. The recipient now dispatches on the content-encryption AlgorithmIdentifier's algorithm OID, so validation checks the recovered key against the inner content-encryption algorithm. Messages with a matching key size, non-HKDF messages, and recipients that do not enable validation are unaffected. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).

  2. CVE-2026-14682 7.5 Élevée

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), and before bctls-fips 1.0.24.

  3. CVE-2026-13586 7.5 Élevée

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

  4. CVE-2026-13506 7.5 Élevée

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

  5. CVE-2026-58063 5.3 Moyenne

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

  6. CVE-2026-58062 9.1 Critique

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

  7. CVE-2026-58061 7.5 Élevée

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

  8. CVE-2026-58060 7.5 Élevée

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

  9. CVE-2026-58059 7.5 Élevée

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

  10. CVE-2026-8763 9.1 Critique

    Legion of the Bouncy Castle Inc. BC-JAVA · Legion of the Bouncy Castle Inc. BC-LTS-JAVA · Legion of the Bouncy Castle Inc. BC-FJA · Bouncycastle bc-java

    In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).