Back to CVE List

CVE-2026-3505

HIGH SEVERITY

Vulnerability Description

Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java, OperatorHelper.Java.

This issue affects BC-JAVA: from 1.74 before 1.84.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-400
Source
NVD
Vendor
maven
Product
org.bouncycastle:bcpg-jdk12

External References

Discussion (0)

Add Comment

No comments yet. Be the first!