Bouncy Castle for Java has Out-of-Bounds Write Vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-9340 · ADVISORY
• bcgit/bc-java · PACKAGE
• bcgit/bc-java · WEB

org.bouncycastle:bc-fips のその他の脆弱性

• CVE-2026-13505高 8.7In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key …
• CVE-2026-8798高 8.7In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy inst…
• CVE-2026-13506高 7.5In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Jav…
• CVE-2026-8763緊急 9.1In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle…
• CVE-2025-12194中 5.9Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules)…