What is GHSA-g6rx-6wfx-gj74?

GHSA-g6rx-6wfx-gj74 is a security advisory published by GitHub Security Advisories with Low severity. Bouncy Castle for Java has Out-of-Bounds Write Vulnerability

Which CVE IDs does GHSA-g6rx-6wfx-gj74 cover?

GHSA-g6rx-6wfx-gj74 covers the following CVE IDs: CVE-2025-9340. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-g6rx-6wfx-gj74?

GHSA-g6rx-6wfx-gj74 affects 1 product, including: maven/org.bouncycastle:bc-fips:= 2.1.0.

GHSA-g6rx-6wfx-gj74Low

Bouncy Castle for Java has Out-of-Bounds Write Vulnerability

Vendor

GitHub Security Advisories

Published

August 22, 2025

Last Modified

August 22, 2025

🔗 CVE IDs covered (1)

CVE-2025-9340 →

📋 Description

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher.

This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0.

🎯 Affected products1

maven/org.bouncycastle:bc-fips:= 2.1.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-9340
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909340
https://github.com/advisories/GHSA-g6rx-6wfx-gj74