CVE-2016-1000342

Name of the Vulnerable Software and Affected Versions Bouncy Castle JCE Provider versions 1.55 and earlier

Description The issue concerns the validation of ASN.1 encoding of signatures. Specifically, it does not fully validate the encoding on verification, allowing potential injection of extra elements into the signature sequence. This could lead to the introduction of 'invisible' data into a signed structure in certain cases.

Recommendations For Bouncy Castle JCE Provider versions 1.55 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.