Vulnerability in Legion Of The Bouncy Castle Inc. Bc-fja
CVE-2026-8798
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI…
Affected products
- Legion Of The Bouncy Castle Inc. Bc-fja — versions 2.1.0
Weakness classification (CWE)
References
- 91579145-5d7b-4cc5-b925-a0262ff19630 (vendor-advisory)