Skip to main content

Bouncy Castle BC-FJA EUVDEUVD-2026-28534

| CVE-2026-8149 MEDIUM
Inconsistency Between Implementation and Documented Design (CWE-1068)
2026-05-08 bcorg GHSA-mx76-r943-rf8g
Information Disclosure Bc Fja Legion Of The Bouncy Castle Inc
5.1
CVSS 4.0 · Vendor: bcorg
Share

Severity by source

Vendor (bcorg) PRIMARY
5.1 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:X/R:X/V:X/RE:M/U:Amber
SUSE
MEDIUM
qualitative

Primary rating from Vendor (bcorg).

CVSS VectorVendor: bcorg

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
N

Lifecycle Timeline

4
Analysis Generated
May 08, 2026 - 09:00 vuln.today
CVSS changed
May 08, 2026 - 07:22 NVD
5.1 (MEDIUM)
CVE Published
May 08, 2026 - 06:01 nvd
UNKNOWN (no severity yet)
CVE Published
May 08, 2026 - 06:01 nvd
MEDIUM 5.1

Blast Radius

ecosystem impact
† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth
  • 80 maven packages depend on org.bouncycastle:bc-fips (4 direct, 77 indirect)
  • 69 maven packages depend on org.bouncycastle:bcprov-lts8on (2 direct, 67 indirect)

Ecosystem-wide dependent count for version 2.1.0 and other introduced versions.

DescriptionCVE.org

A vulnerability in Legion of the Bouncy Castle Inc. BC-FJA BC-FIPS on Linux, X86_64, AVX, AVX-512f.

This vulnerability is associated with program files gcm128w, gcm512w.

This issue affects BC-FJA: from 2.1.0 through 2.1.2.

AnalysisAI

Availability degradation in Bouncy Castle BC-FJA cryptographic library versions 2.1.0 through 2.1.2 on Linux X86_64 systems with AVX or AVX-512f SIMD extensions affects GCM-128 and GCM-512 operations, allowing local attackers to cause denial of service without authentication. The vulnerability is associated with optimized assembly implementations (gcm128w, gcm512w) and results in availability impact with no confidentiality or integrity compromise. No public exploit code or active exploitation has been identified at time of analysis.

Technical ContextAI

The Bouncy Castle BC-FJA library is a FIPS-validated cryptographic module providing implementations of standard algorithms including AES-GCM authenticated encryption. The vulnerability resides in optimized assembly language implementations for GCM (Galois/Counter Mode) operations, specifically the gcm128w and gcm512w modules, which are used on x86_64 Linux systems to accelerate performance using AVX and AVX-512f vector extensions. The root cause is classified under CWE-1068 (Inconsistent Naming Conventions for Identifiers), though the CVSS vector and description suggest the issue manifests as an availability problem in the cryptographic processing path. The affected CPE cpe:2.3:a:legion_of_the_bouncy_castle_inc.:bc-fja:*:*:*:*:*:*:*:* indicates all configurations of the library in the 2.1.x release series are impacted when deployed on compatible processors.

RemediationAI

Upgrade Bouncy Castle BC-FJA to version 2.1.3 or later, which is expected to contain the fix based on the CVSS remediation effectiveness tag (RE:M). Consult the official Bouncy Castle advisory at https://do-not-publish.bouncycastle.org/do_not_publish for confirmed patch version details and release date. If immediate patching is not feasible, disable AVX/AVX-512f SIMD acceleration for GCM operations via runtime configuration or environment variables (if the library provides such options), though this will result in performance degradation. Alternatively, if GCM is not required for your application's use cases, switch to other AEAD modes (e.g., AES-CCM, ChaCha20-Poly1305) implemented in non-vulnerable code paths. Monitor Bouncy Castle release notes for version 2.1.3+ and apply patches promptly, as the availability impact could disrupt cryptographic operations in production systems relying on AES-GCM for TLS, storage encryption, or authenticated messaging.

More in Bc Fja

View all
CVE-2026-8763 CRITICAL
9.3 Aug 03

Certificate name-constraint bypass in Bouncy Castle for Java allows a crafted certificate to escape X.509 permitted/excl
CVE-2026-59638 CRITICAL
9.3 Aug 03

TLS hostname-verification bypass in the Bouncy Castle for Java JSSE provider (BCJSSE) ships the legacy certificate-CN fa
CVE-2026-58062 CRITICAL
9.3 Aug 03

Certificate revocation-check bypass in the Bouncy Castle for Java (bc-java) PKIX provider allows a validly-signed OCSP r
CVE-2026-58060 HIGH
8.7 Aug 03

Uncontrolled memory allocation in Bouncy Castle for Java's HSS public-key parser allows remote unauthenticated attackers
CVE-2026-8798 HIGH
8.7 Aug 08

Unbounded retry loops in BC-FJA's JNI native entropy layer cause calling threads to hang indefinitely when Intel RDSEED

CVE-2026-58059 HIGH
8.7 Aug 03

CPU exhaustion in Bouncy Castle for Java allows remote attackers to cause denial of service by supplying X.500 distingui
CVE-2026-59646 HIGH
8.7 Aug 03

Memory exhaustion denial-of-service in Bouncy Castle's DTLS implementation allows remote unauthenticated attackers to cr
CVE-2026-13506 HIGH
8.7 Aug 03

Uncontrolled recursion in Bouncy Castle for Java's lazy ASN.1 parser enables remote unauthenticated denial of service ac
CVE-2026-14682 HIGH
8.7 Aug 03

Out-of-memory denial-of-service in Bouncy Castle for Java allows remote unauthenticated attackers to crash Java applicat
CVE-2026-59640 HIGH
8.7 Aug 03

Bouncy Castle for Java's OpenPGP session-key decryption path re-exposes the Mister-Zuccherato adaptive-chosen-ciphertext
CVE-2026-59645 HIGH
8.7 Aug 03

Unbounded recursion in Bouncy Castle's OER (Octet Encoding Rules) parser enables remote unauthenticated denial-of-servic
CVE-2026-59649 HIGH
8.7 Aug 03

Memory exhaustion in Bouncy Castle for Java's OpenPGP parser enables unauthenticated remote denial of service via a craf

Same weakness CWE-1068 – Inconsistency Between Implementation and Documented Design

View all
CVE-2025-48905 HIGH
8.1

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP7 Fixed
SUSE Linux Enterprise Server 15 SP7 Fixed
SUSE Linux Enterprise Server 16.0 Fixed

Share

EUVD-2026-28534 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy