Threats Tagged 'ghsa-f5wg-4mfp-h458'
View all threats tagged with 'ghsa-f5wg-4mfp-h458'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-f5wg-4mfp-h458'
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability in Bouncy Castle for Java LTS before version 2.73.13 affects the one-shot native packet ciphers for AES modes including CBC, CCM, CFB, CTR, GCM, and GCM-SIV. The issue arises from improper handling of Java arrays in JNI calls, where input arrays are released in a way that copies key material back into the Java array, potentially overwriting ciphertext with the original key. This can cause applications encrypting in place over their key arrays to inadvertently expose raw AES keys instead of ciphertext. The pure-Java packet ciphers and streaming native modes are not affected. Bouncy Castle for Java (bcprov) is not affected as it does not include native implementations. Join the discussion | GCVE Database | 10/03/2026, 09:31:18 UTC Added: 10/03/2026, 17:21:01 UTC |
Showing 1 to 1 of 1 result