Threats affecting pkg:maven/Legion of the Bouncy Castle Inc./bcpg

A vulnerability in Bouncy Castle for Java versions 1.81 up to but not including 1.86 allows incorrect authorization in the OpenPGP certificate API. The API accepted third-party certifications or trust delegations from subkeys that lacked the required CERTIFY_OTHER key flag, enabling an attacker to escalate a restricted subkey's authority to that of the primary key's identity-issuing capability. This flaw could cause applications relying on the API's validation to mistakenly trust attacker-controlled identities. The issue is fixed in version 1.86.

CVE-2026-71887 is a vulnerability in Bouncy Castle for Java (BC-JAVA) versions 1.81 up to but not including 1.86. The high-level OpenPGP API improperly verifies cryptographic signatures by accepting a signing subkey that lacks the required embedded Primary Key Binding signature in its Subkey Binding signature, violating RFC 9580 requirements. This flaw allows an attacker to misattribute a genuine signature made by the victim's public signing subkey to an attacker-chosen identity, without forging a new signature or recovering private keys. The issue is fixed in version 1.86.

CVE-2026-85515 is a vulnerability in Bouncy Castle for Java before version 1.86 and certain LTS and FIPS editions that causes improper validation of integrity check values in OpenPGP encrypted messages. Specifically, truncated encrypted messages may be accepted without error, and on some code paths, no integrity check is performed at all, allowing altered ciphertext to be accepted as valid plaintext. This affects the SEIPD version 1 path more severely, where no integrity verification occurs, and the AEAD path where truncated chunks may be silently dropped without error. The issue has been fixed in versions 1.86, 2.73.13, 1.0.14, 2.0.14.1, and 2.1.14.

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).

Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java, OperatorHelper.Java. This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.