CVE-2026-8149mediumCWE-1068

CVE-2026-8149: falha de média gravidade em Legion of the Bouncy Castle Inc. BC-LTS

GCM chunking can lead to bad tag exception on decryption

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar BC-FJA+ Monitorar BC-LTS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.1epss 0.2%
A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX-512f. This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C. This issue affects BC-LTS: from 2.73.0 before 2.73.11; BC-FJA: from 2.1.0 before 2.1.3.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/S:N/RE:M/U:Amber
Produtos afetados
Legion of the Bouncy Castle Inc. · BC-FJALegion of the Bouncy Castle Inc. · BC-LTS
CVEs relacionadas — Legion of the Bouncy Castle Inc. BC-LTS

No mesmo produto, das mais perigosas para as menos.

CVE-2026-13586MEDIUMPKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)EPSS 0.6%CVE-2026-58060HIGHHSS public-key level count unbounded, enabling huge allocation on verifyEPSS 0.6%CVE-2025-8885MEDIUMPossible DOS in processing specially formed ASN.1 Object IdentifiersEPSS 0.6%CVE-2026-13506HIGHLazy ASN.1 sequence forcing resets nesting-depth guardEPSS 0.5%CVE-2026-14682HIGHPossible OOM from unbounded up-front allocation on a definite-length readEPSS 0.5%CVE-2026-58059HIGHQuadratic-time escaping when stringifying X.500 distinguished namesEPSS 0.5%