CVE-2026-59643

概要

参考情報

• bcgit/bc-java commit d3f8cc4 · Patch
• bcgit/bc-java · Third Party Advisory

bc-java のその他の脆弱性

• CVE-2026-17507高 7.5In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so …
• CVE-2026-14682高 7.5In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bo…
• CVE-2026-13586高 7.5In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle…
• CVE-2026-13506高 7.5In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Jav…
• CVE-2026-12860中 5.3In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bounc…