Known vulnerabilities in Bouncy Castle for Java FIPS

Vendor: Legion of the Bouncy Castle Inc.
Software: Bouncy Castle for Java FIPS
Software CPE: cpe:2.3:a:legion_of_the_bouncy_castle:bc-fips:*:*:*:*:*:*:*:*
Website: https://www.bouncycastle.org/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bouncy Castle for Java FIPS Bouncy Castle for Java FIPS is affected by 5 known vulnerabilities: 5 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132272 - Inconsistency Between Implementation and Documented Design
CVE-2026-8149		 CWE-1068 Medium
No
No
 2.1.2 25.05.2026 SB2026052535
#VU132271 - Resource exhaustion
CVE-2025-12194		 CWE-400 Medium
No
No
 2.1.1 25.05.2026 SB2026052534
#VU132270 - Resource exhaustion
CVE-2025-9341		 CWE-400 Medium
No
No
 2.1.1 25.05.2026 SB2026052534
#VU132269 - Out-of-bounds write
CVE-2025-9340		 CWE-787 Medium
No
No
 2.1.1 25.05.2026 SB2026052534
#VU132268 - Resource exhaustion
CVE-2025-9092		 CWE-400 Medium
No
No
 2.1.1 25.05.2026 SB2026052534