PT-2026-67016 · Unknown · Bouncy Castle For Java

CVE-2026-12803

·

Published

2026-08-03

·

Updated

2026-08-10

CVSS v4.0

8.7

High

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber
Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12
Description The KCCMBlockCipher MAC does not bind the nonce when Additional Authenticated Data (AAD) is absent, which allows for cross-nonce AEAD forgery. AEAD (Authenticated Encryption with Associated Data) is a form of encryption that simultaneously provides confidentiality and authenticity of the data.
Recommendations Update Bouncy Castle for Java to version 1.85 or later. Update Bouncy Castle for Java LTS to version 2.73.12 or later.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-12803
OPENSUSE-SU-2026:11445-1
OPENSUSE-SU-2026:21538-1
SUSE-SU-2026:23127-1
SUSE-SU-2026:23150-1
SUSE-SU-2026:3559-1

Affected Products

Bouncy Castle For Java