Bouncycastle Bc-Csharp
22 CVEs affecting Bouncycastle Bc-Csharp. Latest disclosed: 2026-10-02. Critical: 0, High: 19.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-63578 | High | 7.5 | 2026-10-02 | Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters) in Legion of the Bouncy Castle Inc. bc-… |
CVE-2026-63577 | High | 7.5 | 2026-10-02 | Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree) in Legion of the Bouncy Castle Inc. bc… |
CVE-2026-63576 | High | 7.5 | 2026-10-02 | Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a name-co… |
CVE-2026-63575 | High | 7.5 | 2026-10-02 | Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allow… |
CVE-2026-63574 | High | 7.5 | 2026-10-02 | Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers (SignatureSubpacketsParser.ReadPacket, UserAttributeS… |
CVE-2026-63573 | High | 7.5 | 2026-10-02 | Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) in Legion of the Bouncy Castle Inc. bc-csharp b… |
CVE-2026-63572 | High | 7.5 | 2026-10-02 | Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an atta… |
CVE-2026-63571 | High | 7.5 | 2026-10-02 | Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator, also used by PkixAttrCertPathBuilder)… |
CVE-2026-63570 | High | 7.5 | 2026-10-02 | Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can s… |
CVE-2026-103604 | High | 7.5 | 2026-10-02 | Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.ValueToString) in Legion of the Bouncy Ca… |
CVE-2026-103603 | High | 7.5 | 2026-10-02 | Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legion of the Bouncy Castle Inc. bc-csharp… |
CVE-2026-103601 | High | 7.5 | 2026-10-02 | Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before… |
CVE-2026-103600 | High | 7.5 | 2026-10-02 | Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unaut… |
CVE-2026-63568 | High | 7.5 | 2026-10-02 | Allocation of resources without limits or throttling in the CMP/CRMF password-based MAC verifier (PKMacBuilder) in Legion of the Bouncy Castle Inc. bc-csharp b… |
CVE-2026-63567 | High | 7.5 | 2026-10-02 | Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has captured an IES or… |
CVE-2026-63566 | High | 7.5 | 2026-10-02 | Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, DtlsReassembler) in Legion of the Bouncy Castle Inc. bc-cs… |
CVE-2026-16001 | High | 7.5 | 2026-10-02 | Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (an IesEngine constructed without a block cipher) i… |
CVE-2026-16000 | High | 7.5 | 2026-10-02 | Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an atta… |
CVE-2026-15999 | High | 7.5 | 2026-10-02 | Improper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp bef… |
CVE-2026-63569 | Medium | 6.5 | 2026-10-02 | Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows… |