This vulnerability in BC-JAVA prior to version 1.85 allows the MLS hash-ratchet mechanism to accept and process an arbitrary 32-bit generation counter value from the sender. This can cause excessive iteration during processing, which may lead to performance degradation or denial of service conditions. The issue is identified as CWE-834, indicating a problem with excessive iteration potentially impacting availability.

The impact of this vulnerability is primarily a high-severity risk of denial of service or resource exhaustion due to excessive iteration triggered by a malicious or malformed generation counter. There is no indication of privilege escalation, data disclosure, or code execution. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time. Users should monitor the vendor's communications for updates and apply patches once available.