GHSA-p2mp-577q-8vh2High

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length...

Published
August 3, 2026
Last Modified
August 3, 2026

🔗 CVE IDs covered (1)

📋 Description

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.

🔗 References (5)