CVE-2025-9092CWE-400

Hybrid Module Deployment in Multi-JVM Environments Leading to Resource Exhaustion

Low · published August 16, 2025

CVSS v4.0
1.0
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader.

This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.

The record
Technical detail
CVSS v4.0
1.0 · LOW
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/R:U/RE:L/U:Green
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2025-08-16T10:29Z
EPSS history
Timeline
  • 16 AUG 10:29Z
    Hybrid Module Deployment in Multi-JVM Environments Leading to Resource Exhaustion
    cvelistv5