GHSA-v6cf-mv9h-c8mcLow

Bouncy Castle for Java Uncontrolled Resource Consumption Vulnerability

Published
August 16, 2025
Last Modified
August 19, 2025

🔗 CVE IDs covered (1)

CVE-2025-9092 →

📋 Description

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader.

This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.

🎯 Affected products1

  • maven/org.bouncycastle:bc-fips:= 2.1.0

🔗 References (3)