Skip to content

Known vulnerabilities in Legion of the Bouncy Castle Inc. bc-csharp

Is your version affected?

CVE Summary Score Published
CVE-2026-103604 Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and… 8.7 High Oct 2, 2026
CVE-2026-103603 Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in… 8.7 High Oct 2, 2026
CVE-2026-103602 Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc 8.2 High Oct 2, 2026
CVE-2026-103601 Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion… 8.2 High Oct 2, 2026
CVE-2026-103600 Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc 8.7 High Oct 2, 2026
CVE-2026-63578 Allocation of resources without limits in password-based private-key decryption… 7.1 High Oct 2, 2026
CVE-2026-63577 Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree)… 8.2 High Oct 2, 2026
CVE-2026-63576 Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc 8.2 High Oct 2, 2026
CVE-2026-63575 Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy… 7.1 High Oct 2, 2026
CVE-2026-63574 Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers… 8.7 High Oct 2, 2026
CVE-2026-63573 Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) in… 8.2 High Oct 2, 2026
CVE-2026-63572 Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc 7.1 High Oct 2, 2026
CVE-2026-63571 Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator,… 8.7 High Oct 2, 2026
CVE-2026-63570 Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc 7.1 High Oct 2, 2026
CVE-2026-63569 Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy… 9.1 Critical Oct 2, 2026
CVE-2026-63568 Allocation of resources without limits or throttling in the CMP/CRMF password-based MAC verifier (PKMacBuilder) in… 8.7 High Oct 2, 2026
CVE-2026-63567 Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc 8.2 High Oct 2, 2026
CVE-2026-63566 Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, DtlsReassembler) in… 8.7 High Oct 2, 2026
CVE-2026-16001 Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (an… 8.2 High Oct 2, 2026
CVE-2026-16000 Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc 8.7 High Oct 2, 2026
CVE-2026-15999 Improper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlockCipher) in… 8.2 High Oct 2, 2026

Other Legion of the Bouncy Castle Inc. products