CVE-2025-14813
NoneCVSS
—
EPSS
0.3%
Published
Apr 15, 2026
CISA due date
—
The record
: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | bouncycastle | 0 | 1.84-1.1 |
Related vulnerabilities
- CVE-2026-3505 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption… Also affects bouncycastle
- CVE-2026-5588 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy… Also affects bouncycastle
- CVE-2026-5598 Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. Also affects bouncycastle
- CVE-2026-0636 Improper neutralization of special elements used in an LDAP query ('LDAP injection')… Also affects bouncycastle
- CVE-2017-13098 BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java… Also affects bouncycastle
- CVE-2026-81822 The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards… CWE-327
- CVE-2026-16693 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain… CWE-327
- CVE-2026-81859 CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive… CWE-327