Resource exhaustion in Legion Of The Bouncy Castle Inc. Bc-java
CVE-2026-3505
Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This vulnerability is associated with program files AEADEncDataPa…
Vulnerability class: DoS (Denial of Service)
EPSS: 0.000 (5.5th percentile) — read the EPSS interpretation.
Affected products
- Legion Of The Bouncy Castle Inc. Bc-java — versions 1.74, 1.81, 1.82
Weakness classification (CWE)
References
- 91579145-5d7b-4cc5-b925-a0262ff19630 (vendor-advisory)
- 91579145-5d7b-4cc5-b925-a0262ff19630 (patch)