Resource exhaustion in Legion Of The Bouncy Castle Inc. For Java - Bc-Fja 2.1.0
CVE-2025-9092
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.001 (4.4th percentile) — read the EPSS interpretation.
Affected products
- Legion Of The Bouncy Castle Inc. For Java - Bc-fja 2.1.0 — versions BC-FJA 2.1.0