CVE-2025-9092lowCWE-400

CVE-2025-9092: falha de baixa gravidade em Legion of the Bouncy Castle Inc.

Hybrid Module Deployment in Multi-JVM Environments Leading to Resource Exhaustion

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Bouncy Castle for Java - BC-FJA+ Monitorar org.bouncycastle:bc-fips

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 1epss 0.2%
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/R:U/RE:L/U:Green
Produtos afetados
Legion of the Bouncy Castle Inc. · Bouncy Castle for Java - BC-FJA 2.1.0