8.7
High
CVE-2026-12852 In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check
Description
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BC-JAVA 1.73 | 1.73 → < 1.85 | 1.85 |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of BC-JAVA
The 52 CVEs of BC-JAVA →
CVE-2026-71890
In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list,…
8.7
High
CVE-2026-71891
In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every…
7.1
High
CVE-2026-18040
In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8)…
5.9
Medium
CVE-2026-71885
In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509…
9.2
Critical