Legion of the Bouncy Castle Inc. bc-csharp

• CVE-2026-103604 High 8.7 Quadratic-time escaping when converting X.509 distinguished names to strings 0.3%
• CVE-2026-103603 High 8.7 Unbounded HSS public key level count allows huge array allocation during signature verification 0.5%
• CVE-2026-103602 High 8.2 Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts 0.2%
• CVE-2026-103601 High 8.2 CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check 0.3%
• CVE-2026-103600 High 8.7 Unbounded ASN.1 nesting depth causes process-terminating stack overflow 0.4%
• CVE-2026-63578 High 7.1 Unbounded PBE iteration count when decrypting PKCS#8 private keys 0.4%
• CVE-2026-63577 High 8.2 Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix 0.2%
• CVE-2026-63576 High 8.2 URI name constraints checked against a mis-parsed host 0.2%
• CVE-2026-63575 High 7.1 PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count 0.2%
• CVE-2026-63574 High 8.7 Unbounded allocation from OpenPGP signature and user attribute subpacket lengths 0.4%
• CVE-2026-63573 High 8.2 Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap 0.3%
• CVE-2026-63572 High 7.1 Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files 0.4%
• CVE-2026-63571 High 8.7 Attribute certificate path validation does not verify the attribute certificate's signature 0.1%
• CVE-2026-63570 High 7.1 Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links 0.2%
• CVE-2026-63569 Critical 9.1 MTI/A0 DHAgreement does not validate the peer's ephemeral value 0.3%
• CVE-2026-63568 High 8.7 Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion 0.4%
• CVE-2026-63567 High 8.2 IesEngine block-cipher mode checks padding before MAC (CBC padding oracle) 0.5%
• CVE-2026-63566 High 8.7 DTLS handshake reassembler allocates buffer from unchecked 24-bit length 0.4%
• CVE-2026-16001 High 8.2 IesEngine stream-mode MAC forgery via length-dependent KDF split 0.2%
• CVE-2026-16000 High 8.7 KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used 0.2%
• CVE-2026-15999 High 8.2 AES-CCM decryption accepts zero or out-of-range tag length, bypassing authentication 0.2%