Home Tools CVE CVE-2026-59644
HIGH

CVE-2026-59644

Bouncycastle Bc Java 2026-08-03 CVSS v3.1
CVSS
7.5

Description

In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.

Weakness (CWE)

CWE-834

EPSS Score

0.31%
Probability of exploitation in next 30 days
24.1th percentile

References

https://github.com/bcgit/bc-java/commit/610d8757d855afe197df0de6d831cb75c81e3b9f Patch https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059644 Third Party Advisory
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE