Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-8885

Possible DOS in processing specially formed ASN.1 Object Identifiers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bcorg

Description

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdenti... https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.Java . This issue affects BC Java: from 1.0 through 1.77; BC-FJA: from 1.0.0 through 1.0.2.5, from 2.0.0 through 2.0.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Legion of the Bouncy Castle Inc. BC Java

Default version status: unaffected

  • 1.0 to ≤ 1.77affected

Legion of the Bouncy Castle Inc. BC-FJA

Default version status: unaffected

  • 1.0.0 to ≤ 1.0.2.5affected
  • 2.0.0 to ≤ 2.0.1affected

References