Known vulnerabilities in Bouncy Castle for Java

Software CPE: cpe:2.3:a:legion_of_the_bouncy_castle:bc-java:*:*:*:*:*:*:*:*
Total vulnerabilities: 26
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bouncy Castle for Java Bouncy Castle for Java is affected by 26 known vulnerabilities: 1 high, 17 medium, 8 low Critical High Medium Low

Vulnerabilities (26)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132273 - Incorrect Calculation
CVE-2025-14813
CWE-682 Medium
No
No
1.80.2, 1.81.1, 1.84 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 14 more
#VU132262 - Resource exhaustion
CVE-2026-3505
CWE-400 Medium
No
No
1.80.2, 1.81.1, 1.84 25.05.2026 SB2026052529
SB2026052531
SB2026052542
and 2 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636
CWE-90 Medium
No
No
1.80.2, 1.81.1, 1.84 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 9 more
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-5588
CWE-327 Medium
No
No
1.80.2, 1.81.1, 1.84 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 12 more
#VU132259 - Covert Timing Channel
CVE-2026-5598
CWE-385 Medium
No
No
1.80.1, 1.81.1, 1.84 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 12 more
#VU121014 - Resource exhaustion
CVE-2025-8885
CWE-400 Medium
No
No
1.78 07.01.2026 SB2024050731
SB2026010745
SB2026010827
and 10 more
#VU117436 - Allocation of Resources Without Limits or Throttling
CVE-2025-8916
CWE-770 Medium
No
No
1.79 21.10.2025 SB2025102223
SB2025102241
SB2025102248
and 35 more
#VU89221 - Insufficient Verification of Data Authenticity
CVE-2024-34447
CWE-345 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024070445
SB2024071844
and 15 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171
CWE-203 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU85874 - Resource exhaustion
CVE-2023-33202
CWE-400 Medium
No
No
1.73 29.01.2024 SB2024012929
SB2024012930
SB2024013106
and 19 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201
CWE-90 Medium
No
No
1.74 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU55035 - Information Exposure Through Timing Discrepancy
CVE-2020-15522
CWE-208 Medium
No
No
1.66 20.07.2021 SB2021072033
SB2021062601
SB2022062815
and 11 more
#VU49086 - Comparison using wrong factors
CVE-2020-28052
CWE-1025 High
Available
No
1.67 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU48199 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26939
CWE-200 Medium
No
No
1.61 02.11.2020 SB2020110803
SB2024020522
SB2024040108
and 3 more
#VU27499 - Deserialization of Untrusted Data
CVE-2018-1000613
CWE-502 Medium
No
No
1.60 04.05.2020 SB2018070915
SB2020050421
SB2018080316
and 5 more
#VU22272 - Missing release of memory after effective lifetime
CVE-2019-17359
CWE-401 Medium
No
No
1.64 24.10.2019 SB2019102418
SB2020011478
SB2020042338
and 14 more
#VU13591 - Cryptographic Issues
CVE-2016-1000343
CWE-310 Low
No
No
- 05.07.2018 SB2018060419
SB2024020522
SB2025011564
and 2 more
#VU13590 - Improper Verification of Cryptographic Signature
CVE-2016-1000342
CWE-347 Low
No
No
- 05.07.2018 SB2018060418
SB2024020522
SB2025011564
and 2 more


Showing elements 1 - 20 out of 26