CVE-2026-15999

The record

Improper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an on-path attacker to modify CCM-encrypted content without detection via an AlgorithmIdentifier whose CCMParameters declare an authentication tag (aes-ICVlen) of zero or another length outside the RFC 5084 set, because CcmParameters accepted any value and CcmBlockCipher validated the tag length only when encrypting, so decryption compared a zero-length or very short tag. Affected paths include ParameterUtilities.GetCipherParameters, used by CmsEnvelopedData and CmsEnvelopedDataParser for EnvelopedData encrypted with AES-CCM, and any caller passing an unchecked tag length to CcmBlockCipher for decryption.

Affected packages

Related vulnerabilities

• CVE-2026-119186 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
• CVE-2026-118782 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
• CVE-2026-118776 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
• CVE-2026-90720 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024… CWE-354
• CVE-2026-116608 A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. CWE-354
• CVE-2026-65625 The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified… CWE-354
• CVE-2026-115906 zip is a zip library for Rust that supports reading and writing simple ZIP files. CWE-354
• CVE-2026-89320 `HmacShaCryptor.Hash` never hashed its input. CWE-354