CVE-2025-9341
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files org/bouncycastle/crypto/fips/AESNativeCBC.Java, org/bouncycastle/crypto/engines/AESNativeCBC.Java.
This issue affects Bouncy Castle for Java FIPS: 2.1.0; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.
| Software | From | Fixed in |
|---|---|---|
org.bouncycastle / bc-fips
|
2.1.0 | 2.1.0.x |
|
org.bouncycastle / bc-fips
|
2.1.0 | 2.1.1 |
|
org.bouncycastle / bctls-fips
|
2.73.7 | 2.73.7.x |
|
org.bouncycastle / bctls-fips
|
2.73.7 | 2.73.8 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime