What is GHSA-4r33-j73q-cw77?

GHSA-4r33-j73q-cw77 is a security advisory published by GitHub Security Advisories with High severity. In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent...

Which CVE IDs does GHSA-4r33-j73q-cw77 cover?

GHSA-4r33-j73q-cw77 covers the following CVE IDs: CVE-2026-12803. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-4r33-j73q-cw77High

In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent...

Vendor

GitHub Security Advisories

Published

August 3, 2026

Last Modified

August 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-12803 →

📋 Description

In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS before 2.73.12.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-12803
https://github.com/bcgit/bc-java/commit/697794413ebf7bc5e3fce609a707826ba52981af
https://github.com/bcgit/bc-java/commit/7d79aa76e984da85f2a541cae8ba2ae56e1713bc
https://github.com/bcgit/bc-java/wiki/CVE-2026-12803
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012803
https://github.com/advisories/GHSA-4r33-j73q-cw77