Home Tools CVE CVE-2026-12852
HIGH

CVE-2026-12852

Bouncycastle Bc Java 2026-08-03 CVSS v3.1
CVSS
7.5

Description

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.

Weakness (CWE)

CWE-789

EPSS Score

0.31%
Probability of exploitation in next 30 days
24.1th percentile

References

https://github.com/bcgit/bc-java/commit/a747038bb5bbd5e29fb2b7607ab38af1fd8d1790 Patch https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012852 Third Party Advisory
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE