These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-03T04:16:39.957Z and has not been modified since then. The Bouncy Castle for Java library, prior to version 1.85, contains a vulnerability related to the processing of ASN.1 sequences. Specifically, the library does not properly handle nested ASN.1 sequences, which can lead to a denial-of-service (D [truncated]
Bouncy Castle for Java before 1.85 has an issue with RSA PKCS#1 verification, skipping the last two hash bytes in the NULL-omitted path. This also affects Bouncy Castle for Java LTS before 2.73.12. Users should review their dependencies and update to a patched version if vulnerable. The vulnerability could allow attackers to bypass security checks, potentially leading to unauthorized access or other malic [truncated]
The CVE record for CVE-2026-58063 was published on 2026-08-03T03:16:45.773Z and has not been modified since then. The NVD entry is currently empty. This CVE is related to Bouncy Castle for Java before 1.85, Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before specific versions. The vulnerability involves BCFKS keystore load honouring unbounded KDF cost from untrusted [truncated]
The vulnerability in Bouncy Castle for Java before version 1.85 allows for OpenPGP user-attribute subpacket length to be bounded only by JVM max memory. This issue affects multiple versions of Bouncy Castle for Java, including LTS and FIPS versions. Organizations should review their inventory and apply updates to prevent potential attacks. The CVE record was published on 2026-08-03T01:16:45.120Z and has n [truncated]
The CVE-2026-59646 vulnerability affects Bouncy Castle for Java versions before 1.85, LTS before 2.73.12, and FIPS (BC-FJA) before specific versions. This issue involves the DTLS handshake reassembler allocating a buffer from an unchecked 24-bit length, potentially leading to buffer overflow attacks. Organizations using Bouncy Castle for Java in their applications, especially those using DTLS protocol, sh [truncated]
The CVE-2026-59642 vulnerability affects Bouncy Castle for Java versions before 1.85. This issue involves CMS AuthenticatedData content not being bound to MAC when authAttrs are present. The vulnerability impacts multiple versions of Bouncy Castle for Java, including LTS and FIPS versions. Organizations should review their inventory and apply updates to prevent potential security risks. The CVE record was [truncated]
The Bouncy Castle for Java S/MIME validator vulnerability (CVE-2026-59641) affects versions before 1.85, allowing attackers to bypass security checks due to trusting signer-asserted signingTime for path validation. This issue also impacts Bouncy Castle for Java LTS before 2.73.12 and FIPS versions. Organizations should review their inventory, apply updates, and consider compensating controls to mitigate p [truncated]
The CVE-2026-59640 vulnerability affects Bouncy Castle for Java, specifically versions before 1.85, and relates to an OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12 and Bouncy Castle for Java FIPS (BC-FJA) before specific versions. The vulnerability has a CVSS score of 8.7, indicating high severity. Organizations usin [truncated]
The Bouncy Castle for Java library, widely used for cryptographic operations, has a critical vulnerability (CVE-2026-59638) where the hostname verifier CN-fallback is enabled by default, contrary to documentation. This issue affects multiple versions of Bouncy Castle for Java, including before 1.85, Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before specific version [truncated]
The Bouncy Castle for Java library, prior to version 1.85, contains a vulnerability in its PKCS#8 / PBES2 decryptors that do not properly handle the cost of Key Derivation Functions (KDFs). This issue allows for excessive computational overhead, potentially impacting performance and security. Organizations and developers using Bouncy Castle for Java, especially those handling cryptographic operations in i [truncated]
CVE-2026-15997 is an out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM, potentially leading to buffer overflow. The issue affects BC-LTS versions from 2.73.0 to before 2.73.12.1 and is particularly relevant for applications accepting memoable SHA3 / SHAKE states from untrusted sources. Developers and users should review the vulnerability details and apply ne [truncated]
CVE-2026-8149 is a medium-severity issue in Legion of the Bouncy Castle Inc. BC-LTS that affects Linux x86_64 builds using AVX or AVX-512f-specific GCM program files. The supplied NVD record shows a local attack surface, low attack complexity, and low availability impact. Systems running BC-LTS from 2.73.0 through 2.73.10 should be treated as affected until upgraded.
A covert timing channel vulnerability exists in the Legion of the Bouncy Castle BC-JAVA cryptographic library, specifically within the FrodoEngine implementation. The vulnerability allows attackers to extract sensitive information through timing analysis of cryptographic operations. Affected versions span multiple release branches: 1.71 through 1.80.1, 1.81 through 1.80.1, and 1.82 through 1.84. The vendo [truncated]
A Use of a Broken or Risky Cryptographic Algorithm vulnerability (CWE-327) exists in Legion of the Bouncy Castle's BC-JAVA, BCPKIX-FIPS, and BCPIX-LTS libraries. The vulnerability affects the PKIX modules and is associated with the JcaContentVerifierProviderBuilder and JcaContentVerfierProviderBuilder Java files. The issue stems from improper cryptographic algorithm selection that could allow attackers to [truncated]
CVE-2026-3505 is a high-severity availability issue in the BC-JAVA bcpg module from Legion of the Bouncy Castle Inc. The NVD record describes an "allocation of resources without limits or throttling" weakness affecting AEAD-related processing paths. In practical defensive terms, software that accepts untrusted PGP or AEAD input through bcpg should be treated as exposed to resource-exhaustion risk until patched.
A critical vulnerability exists in the Legion of the Bouncy Castle BC-JAVA cryptographic library, specifically within the G3413CTRBlockCipher implementation. The flaw stems from use of a broken or risky cryptographic algorithm (CWE-327), potentially enabling confidentiality and integrity impacts on affected systems. The vulnerability affects BC-JAVA versions from 1.59 before 1.80.2, from 1.81 before 1.81. [truncated]
