In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can…
Priority LOW 26CWE-203Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-203.
Summary
In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEncoding. Sending invalid ciphertext that decrypts to a short payload in the OAEP Decoder could result in the throwing of an early exception, potentially leaking some information about the private exponent of the RSA private key performing the encryption.
Why it matters now
EPSS 0.00925 60th percentileScored 2026-11-07
Fix Fixed org.bouncycastle:bcprov-jdk14 (Maven): 1.61org.bouncycastle:bcprov-jdk15 (Maven): 1.61+6 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | org.bouncycastle:bcprov-jdk14 (Maven) | before 1.61 | 1.61 | Patch available | GHSA-72m5-fvvv-55m6 |
| — | org.bouncycastle:bcprov-jdk15 (Maven) | before 1.61 | 1.61 | Patch available | GHSA-72m5-fvvv-55m6 |
| — | org.bouncycastle:bcprov-jdk16 (Maven) | before 1.61 | 1.61 | Patch available | GHSA-72m5-fvvv-55m6 |
| — | org.bouncycastle:bc-fips (Maven) | before 1.0.2 | 1.0.2 | Patch available | GHSA-72m5-fvvv-55m6 |
| — | org.bouncycastle:bcprov-ext-jdk15on (Maven) | before 1.61 | 1.61 | Patch available | GHSA-72m5-fvvv-55m6 |
| — | org.bouncycastle:bcprov-ext-jdk16 (Maven) | before 1.61 | 1.61 | Patch available | GHSA-72m5-fvvv-55m6 |
| — | org.bouncycastle:bcprov-jdk15on (Maven) | before 1.61 | 1.61 | Patch available | GHSA-72m5-fvvv-55m6 |
| — | org.bouncycastle:bcprov-jdk15to18 (Maven) | before 1.61 | 1.61 | Patch available | GHSA-72m5-fvvv-55m6 |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- org.bouncycastle:bcprov-jdk14 (Maven) Vendor— Affected before 1.61 Fixed in 1.61 Patch available GHSA-72m5-fvvv-55m6
- org.bouncycastle:bcprov-jdk15 (Maven) Vendor— Affected before 1.61 Fixed in 1.61 Patch available GHSA-72m5-fvvv-55m6
- org.bouncycastle:bcprov-jdk16 (Maven) Vendor— Affected before 1.61 Fixed in 1.61 Patch available GHSA-72m5-fvvv-55m6
- org.bouncycastle:bc-fips (Maven) Vendor— Affected before 1.0.2 Fixed in 1.0.2 Patch available GHSA-72m5-fvvv-55m6
- org.bouncycastle:bcprov-ext-jdk15on (Maven) Vendor— Affected before 1.61 Fixed in 1.61 Patch available GHSA-72m5-fvvv-55m6
- org.bouncycastle:bcprov-ext-jdk16 (Maven) Vendor— Affected before 1.61 Fixed in 1.61 Patch available GHSA-72m5-fvvv-55m6
- org.bouncycastle:bcprov-jdk15on (Maven) Vendor— Affected before 1.61 Fixed in 1.61 Patch available GHSA-72m5-fvvv-55m6
- org.bouncycastle:bcprov-jdk15to18 (Maven) Vendor— Affected before 1.61 Fixed in 1.61 Patch available GHSA-72m5-fvvv-55m6
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:bouncycastle:fips_java_api:*:*:*:*:*:*:*:* | before 1.0.1.2 | Vulnerable | Legion of the Bouncy Castle Inc. |
| cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:*:*:*:*:*:*:*:* | before 1.61 | Vulnerable | Legion of the Bouncy Castle Inc. |
- cpe:2.3:a:bouncycastle:fips_java_api:*:*:*:*:*:*:*:* Versions before 1.0.1.2 Vulnerable ·Legion of the Bouncy Castle Inc.
- cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:*:*:*:*:*:*:*:* Versions before 1.61 Vulnerable ·Legion of the Bouncy Castle Inc.
Remediation
- Fix · GHSA-72m5-fvvv-55m6 org.bouncycastle:bcprov-jdk14 (Maven) Fixed in 1.61 Advisory →
- Fix · GHSA-72m5-fvvv-55m6 org.bouncycastle:bcprov-jdk15 (Maven) Fixed in 1.61 Advisory →
- Fix · GHSA-72m5-fvvv-55m6 org.bouncycastle:bcprov-jdk16 (Maven) Fixed in 1.61 Advisory →
- Fix · GHSA-72m5-fvvv-55m6 org.bouncycastle:bc-fips (Maven) Fixed in 1.0.2 Advisory →
- Fix · GHSA-72m5-fvvv-55m6 org.bouncycastle:bcprov-ext-jdk15on (Maven) Fixed in 1.61 Advisory →
- Fix · GHSA-72m5-fvvv-55m6 org.bouncycastle:bcprov-ext-jdk16 (Maven) Fixed in 1.61 Advisory →
- Fix · GHSA-72m5-fvvv-55m6 org.bouncycastle:bcprov-jdk15on (Maven) Fixed in 1.61 Advisory →
- Fix · GHSA-72m5-fvvv-55m6 org.bouncycastle:bcprov-jdk15to18 (Maven) Fixed in 1.61 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2020-26939
- 2026-10-03 Alias added: GHSA-72m5-fvvv-55m6
References
Other 5
- [solr-issues] 20210525 [jira] [Created] (SOLR-15431) Security vulnerability with Bouncy Castle library within Apache Solr 8.8.2
- https://github.com/bcgit/bc-java/commit/930f8b274c4f1f3a46e68b5441f1e7fadb57e8c1
- https://lists.apache.org/thread.html/r8c36ba34e80e05eecb1f80071cc834d705616f315b634ec0c7d8f42e@%3Cissues.solr.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2020/11/msg00007.html
- https://security.netapp.com/advisory/ntap-20201202-0005
More Legion of the Bouncy Castle Inc. Fips Java Api vulnerabilities
- TI-2026-41816 Stapled OCSP response accepted without binding to the checked certificate CVSS 4.0CRITICAL 9.3
- TI-2026-07701 Name Constraints bypass via trailing dot in rfc822Name and URI CVSS 4.0CRITICAL 9.3
- TI-2026-41814 HSS public-key level count unbounded, enabling huge allocation on verify CVSS 4.0HIGH 8.7
- TI-2026-41813 Quadratic-time escaping when stringifying X.500 distinguished names CVSS 4.0HIGH 8.7
- TI-2026-12374 Possible OOM from unbounded up-front allocation on a definite-length read CVSS 4.0HIGH 8.7
- TI-2026-11431 Lazy ASN.1 sequence forcing resets nesting-depth guard CVSS 4.0HIGH 8.7
Sources
- CVE-2020-26939 · CVE Program
- CVE-2020-26939 · NVD
- FIRST EPSS
- GHSA-72m5-fvvv-55m6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences