Vulnerabilities

TI-2026-12374 CVE-2026-14682 · GHSA-4hc3-69f9-4wfx

Possible OOM from unbounded up-front allocation on a definite-length read

MEDIUM 44

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00493 Published 2026-08-03 Partial fix · 1.85, 2.73.12 +4 CWE-789

TI-2026-42533 CVE-2026-59638 · GHSA-8rxj-3p7p-rq39

MEDIUM 48

In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00345 Published 2026-08-03 Fixed in 1.85, 2.73.12 +3 CWE-297

TI-2026-42541 CVE-2026-59646 · GHSA-4m8h-6737-hrw6

MEDIUM 44

In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00465 Published 2026-08-03 Partial fix · 1.85, 2.73.12 +3 CWE-789