Vulnerabilities

TI-2026-10955 CVE-2026-12817 · GHSA-9q38-7pr7-8j6w

OpenPGP AEAD decryption skips final tag on chunk-aligned data

MEDIUM 43

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00169 Published 2026-08-03 Partial fix · 1.85, 2.73.12 +3 CWE-354

TI-2026-42535 CVE-2026-59640 · GHSA-w983-hf44-gcww

MEDIUM 44

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00347 Published 2026-08-03 Partial fix · 1.85, 2.73.12 +3 CWE-203

TI-2026-42543 CVE-2026-59648 · GHSA-p3f8-5jpx-fgqm

LOW 31

In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00423 Published 2026-08-03 Partial fix · 1.85, 2.73.12 +3 CWE-770

TI-2026-42544 CVE-2026-59649 · GHSA-r7h8-35pv-fwgx

MEDIUM 44

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00493 Published 2026-08-03 Partial fix · 1.85, 2.73.12 +3 CWE-789