Skip to content
CVE PROGRAM SOURCE RECORD1.0 Low

CVE-2025-9092

Hybrid Module Deployment in Multi-JVM Environments Leading to Resource Exhaustion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bcorg

Description

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0

Default version status: unaffected

  • BC-FJA 2.1.0 to ≤ 2.1.0affected

References