Skip to content
fr Sign in
5.1 Medium

CVE-2026-8149 A vulnerability in Legion of the Bouncy Castle Inc

Description

A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX-512f. This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C. This issue affects BC-LTS: from 2.73.0 before 2.73.11; BC-FJA: from 2.1.0 before 2.1.3.

Affected products and versions

Product Affected versions Fixed in
BC-FJA 2.1 2.1.0 → < 2.1.3 2.1.3
BC-LTS 2.73 2.73.0 → < 2.73.11 2.73.11

References

Timeline

  1. Published
  2. Last modified

Other CVEs of BC-FJA

The 32 CVEs of BC-FJA →
CVE-2026-71888 In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose… 8.7 High CVE-2026-71889 In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer -… 8.7 High CVE-2026-71892 In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients,… 6.9 Medium CVE-2026-85515 In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on… 8.2 High
Track this CVE