Bouncy Castle bc-csharp any version

MTI/A0 DHAgreement does not validate the peer's ephemeral value

Unbounded HSS public key level count allows huge array allocation during signature verification

DTLS handshake reassembler allocates buffer from unchecked 24-bit length

Unbounded allocation from OpenPGP signature and user attribute subpacket lengths

Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion

Unbounded ASN.1 nesting depth causes process-terminating stack overflow

Quadratic-time escaping when converting X.509 distinguished names to strings

KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used

Attribute certificate path validation does not verify the attribute certificate's signature

IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)

Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap

CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check

Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts

AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication

URI name constraints checked against a mis-parsed host

Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix

IesEngine stream-mode MAC forgery via length-dependent KDF split

Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files

Unbounded PBE iteration count when decrypting PKCS#8 private keys

Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links

PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count

Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.