NonePublished
CVE-2025-9340
native encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output.
Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0.
Severity none: primary CNA CVSS 0 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-08-22T09:39:47.303Z. Updated 2025-08-22T10:37:18.585Z.
CVSS0v4.0KEVNot listedEPSSPresentUpdated