Skip to content
CVE PROGRAM SOURCE RECORD0.0 None

CVE-2025-9340

native encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bcorg

Description

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Legion of the Bouncy Castle Inc. Bouncy Castle for Java

Default version status: unaffected

  • BC-FJA 2.1.0 to ≤ 2.1.0affected

References