Executive brief
Bouncy Castle is a widely used cryptographic library that provides security functions for Java applications. A vulnerability in its ARM-specific native code could allow an attacker to cause a memory error when the application processes specific cryptographic states from untrusted sources. This could potentially lead to information disclosure or application instability on affected ARM-based systems.
Technical details
An out-of-bounds write vulnerability (CWE-787) exists in the native C implementation of SHA3 and SHAKE for ARM architectures within the Bouncy Castle BC-LTS library. The issue is located in the shake.c and sha3.c files and is triggered when an application accepts memoable SHA3/SHAKE states from potentially untrusted sources. An attacker could exploit this to cause a buffer overflow, potentially leading to memory corruption or information leakage. The vulnerability affects versions 2.73.0 through 2.73.12.1 and requires specific conditions, including user interaction and high attack complexity, to exploit.
Affected products
- Legion of the Bouncy Castle Inc. BC-LTS (bcprov-lts8on) 2.73.0 to 2.73.12.1
Timeline
- 2026-07-16: disclosed
- 2026-07-16: advisory