Skip to main content

Java EUVDEUVD-2025-209467

| CVE-2025-14813 CRITICAL
Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
2026-04-15 bcorg GHSA-574f-3g2m-x479
Java Information Disclosure Bc Java
9.3
CVSS 4.0 · Vendor: bcorg
Share

Severity by source

Vendor (bcorg) PRIMARY
9.3 CRITICAL
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:Red
SUSE
8.6 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Red Hat
7.5 HIGH
qualitative

Primary rating from Vendor (bcorg).

CVSS VectorVendor: bcorg

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:Red
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

7
Re-analysis Queued
Apr 17, 2026 - 15:52 vuln.today
cvss_changed
CVSS changed
Apr 15, 2026 - 15:22 NVD
9.4 (CRITICAL) 9.3 (CRITICAL)
Patch released
Apr 15, 2026 - 14:30 nvd
Patch available
Analysis Generated
Apr 15, 2026 - 12:37 vuln.today
EUVD ID Assigned
Apr 15, 2026 - 09:30 euvd
EUVD-2025-209467
Analysis Generated
Apr 15, 2026 - 09:30 vuln.today
CVE Published
Apr 15, 2026 - 08:56 nvd
CRITICAL 9.3

Blast Radius

ecosystem impact
† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth
  • 11 maven packages depend on org.bouncycastle:bcprov-jdk14 (4 direct, 7 indirect)

Ecosystem-wide dependent count for version 1.59.

DescriptionCVE.org

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher.

GOSTCTR implementation unable to process more than 255 blocks correctly.

This issue affects BC-JAVA: from 1.59 before 1.84.

AnalysisAI

GOST CTR block cipher in Bouncy Castle BC-JAVA processes only the first 255 blocks correctly, causing silent data corruption in encryption/decryption operations for longer messages. Affects BC-JAVA versions 1.59 through 1.83, with fix available in version 1.84. Local attack vector (CVSS AV:L) with critical CVSS 9.4 score reflects potential for both confidentiality and integrity compromise when applications process GOST-encrypted data streams exceeding 255 blocks (~4KB). No KEV listing or public

Technical ContextAI

The vulnerability resides in G3413CTRBlockCipher.java, the Bouncy Castle implementation of GOST R 34.13-2015 CTR (Counter) mode encryption. CTR mode transforms a block cipher into a stream cipher by encrypting sequential counter values and XORing the results with plaintext. The implementation contains a counter overflow or boundary condition error that prevents correct processing beyond the 255th block. In GOST block ciphers (64-bit or 128-bit block size), this limits reliable encryption to approximately 4-16KB depending on block size. CWE-327 (Use of Broken/Risky Cryptographic Algorithm) classification reflects that while GOST itself is not inherently broken, this implementation flaw renders it cryptographically unsafe. The CPE identifies the affected library as cpe:2.3:a:legion_of_the_bouncy_castle_inc.:bc-java, a widely-deployed Java cryptographic provider used in enterprise applications, TLS implementations, and secure communication frameworks.

RemediationAI

Upgrade Bouncy Castle BC-JAVA to version 1.84 or later, which contains the fix for the G3413CTRBlockCipher block counter handling. Organizations should audit their dependency trees using tools like Maven Dependency Plugin or Gradle's dependency reports to identify all components using BC-JAVA versions 1.59-1.83. Update the dependency declaration in pom.xml (Maven) or build.gradle (Gradle) to specify org.bouncycastle:bcprov-jdk18on:1.84 or appropriate variant for your JDK version. For systems unable to immediately upgrade, consider temporary workarounds: avoid GOST CTR mode encryption for messages exceeding 255 blocks (implement message segmentation with independent encryption operations per segment), or substitute alternative GOST modes like CBC or GCM if protocol allows. Consult the official advisory at https://github.com/bcgit/bc-java/wiki/CVE-2025-14813 for implementation-specific guidance and verify fixes through regression testing of GOST encryption workflows with multi-kilobyte payloads.

More in Java

View all
CVE-2012-4681 CRITICAL POC
9.8 Aug 28

Oracle Java SE 7 Update 6 and earlier contains multiple sandbox bypass vulnerabilities via the ClassFinder and forName m
CVE-2015-7450 CRITICAL POC
9.8 Jan 02

Remote code execution in IBM Sterling B2B Integrator, Sterling Integrator, and Tivoli Common Reporting allows unauthenti
CVE-2013-2465 CRITICAL POC
9.8 Jun 18

Java Runtime Environment sandbox bypass via incorrect image channel verification in 2D component allows remote unauthent
CVE-2011-3544 CRITICAL POC
9.8 Oct 19

Oracle Java SE JDK/JRE 7 and 6 Update 27 and earlier allows remote code execution with complete system compromise throug
CVE-2010-1871 HIGH POC
8.8 Aug 05

JBoss Seam 2 in Red Hat JBoss EAP 4.3.0 fails to sanitize JBoss Expression Language inputs, allowing remote attackers to
CVE-2012-1723 CRITICAL POC
9.8 Jun 16

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
CVE-2013-0422 CRITICAL POC
9.8 Jan 10

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using
CVE-2012-0507 CRITICAL POC
9.8 Jun 07

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Up
CVE-2015-4852 CRITICAL POC
9.8 Nov 18

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers

CVE-2012-5076 CRITICAL POC
9.8 Oct 16

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allow
CVE-2017-3066 CRITICAL POC
9.8 Apr 27

Remote unauthenticated attackers can execute arbitrary code on Adobe ColdFusion servers through Java deserialization fla
CVE-2012-0391 CRITICAL POC
9.8 Jan 08

The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during

Same weakness CWE-327 – Use of a Broken or Risky Cryptographic Algorithm

View all
CVE-2022-3365 CRITICAL POC
9.8
CVE-2014-8687 CRITICAL POC
9.8
CVE-2017-17382 MEDIUM POC
5.9
CVE-2016-6602 CRITICAL POC
9.8
CVE-2023-34039 CRITICAL POC
9.8
CVE-2025-2539 HIGH POC
7.5
CVE-2017-9466 CRITICAL POC
9.8
CVE-2023-5347 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

SUSE

Severity: High
Product Status
openSUSE Tumbleweed Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS Affected

Share

EUVD-2025-209467 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy