Description
Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher.
This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Legion of the Bouncy Castle | Bouncy Castle for Java | BC-FJA 2.1.0 – ≤ 2.1.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.bouncycastle:bc-fips | >= 2.1.0, < 2.1.1 | 2.1.1 | GHSA-g6rx-6wfx-gj74 |
Advisories 1
- WID-SEC-2025-1895 Bouncy Castle: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 24, 2025