CVE-2026-59648CWE-770denial-of-service

CVE-2026-59648

Medium · published August 3, 2026

CVSS v3.1

5.3

EPSS

Percentile

35.5

In the wild

Unconfirmed

What it is

In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0: Not supplied
EPSS: 0.00423 · 35.5th percentile
Weakness: CWE-770 · Allocation of Resources Without Limits or Throttling
Published: 2026-08-03T05:16Z

Affected products (5)

Product	Versions	Fixed in
bouncycastle/bc-java	< 1.85	1.85
bouncycastle/bcpg-fips	≥ 1.0.6, < 1.0.13	1.0.13
bouncycastle/bcpg-fips	≥ 2.0.8, < 2.0.13	2.0.13
bouncycastle/bcpg-fips	≥ 2.1.10, < 2.1.13	2.1.13
bouncycastle/bouncy_castle_for_java_lts	≤ 2.73.11	—

References (2)

https://github.com/bcgit/bc-java/commit/c915cc3f7a8d58f5ea2f88f01dfef2d402dd0799 · 91579145-5d7b-4cc5-b925-a0262ff19630 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059648 · 91579145-5d7b-4cc5-b925-a0262ff19630

EPSS history

Timeline

03 AUG 00:45Z
OpenPGP Argon2 S2K honours attacker-chosen memory and passes
cvelistv5