CVE-2025-8885CWE-770

Possible DOS in processing specially formed ASN.1 Object Identifiers

Medium · published August 12, 2025

CVSS v4.0
6.3
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdenti... https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.Java .

This issue affects BC Java: from 1.0 through 1.77; BC-FJA: from 1.0.0 through 1.0.2.5, from 2.0.0 through 2.0.1.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/S:P/R:U/RE:M/U:Amber
EPSS
0.00541 · 44.7th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-08-12T09:13Z
EPSS history
Timeline
  • 12 AUG 09:13Z
    Possible DOS in processing specially formed ASN.1 Object Identifiers
    cvelistv5