CVE-2025-9340noneCWE-787

CVE-2025-9340: falha em Legion of the Bouncy Castle Inc.

native encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output.

Publicada em

Seguir esta CVE+ Monitorar Bouncy Castle for Java+ Monitorar org.bouncycastle:bc-fips

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 0epss 0.2%
Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0.
CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/S:N/R:U/RE:M/U:Green
Produtos afetados
Legion of the Bouncy Castle Inc. · Bouncy Castle for Java