Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2024-30172

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.

Published: May 14, 2024
Updated: May 4, 2025
CVE: CVE-2024-30172
GHSA: GHSA-m44j-cfrm-g8qc
Severity: Medium
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWEs:

CWE-835

Affected Software
References

Software	From	Fixed in
org.bouncycastle / bcprov-jdk18on	-	1.78
org.bouncycastle / bcprov-jdk15on	-	1.78
org.bouncycastle / bcprov-jdk15to18	-	1.78
org.bouncycastle / bcprov-jdk14	-	1.78
org.bouncycastle / bctls-jdk18on	-	1.78
org.bouncycastle / bctls-jdk14	-	1.78
org.bouncycastle / bctls-jdk15to18	-	1.78
org.bouncycastle / bcpkix-jdk18on	-	1.78
org.bouncycastle / bcpkix-jdk15to18	-	1.78
org.bouncycastle / bcpkix-jdk14	-	1.78
BouncyCastle	-	-
BouncyCastle.Cryptography	-	2.3.1

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime