Threats affecting pkg:maven/org.bouncycastle/bctls-fips

Bouncy Castle for Java versions prior to 1.85 and certain LTS and FIPS versions contain a vulnerability that may cause an out-of-memory (OOM) condition due to unbounded memory allocation during a definite-length read operation. This issue affects multiple Bouncy Castle Java variants including LTS before 2.73.12, BC-FJA before 1.0.2.7, 2.0.2, and 2.1.3, and bctls-fips before 1.0.24. The vulnerability is classified under CWE-789 (Uncontrolled Memory Allocation).