Bouncy Castle for Java has Out-of-Bounds Write Vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-9340 · ADVISORY
• bcgit/bc-java · PACKAGE
• bcgit/bc-java · WEB

Lỗ hổng khác của org.bouncycastle:bc-fips

• CVE-2026-13505CAO 8.7In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key …
• CVE-2026-8798CAO 8.7In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy inst…
• CVE-2026-13506CAO 7.5In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Jav…
• CVE-2026-8763NGHIÊM TRỌNG 9.1In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle…
• CVE-2025-12194TRUNG BÌNH 5.9Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules)…