VULNERABILITY INTELLIGENCE

CVE-2025-9092

EPSS probability0.15%
CISA KEVNot currently listed
Published2025-08-16
Last modified2026-06-17

Description

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.

Weakness classification

  • 91579145-5d7b-4cc5-b925-a0262ff19630: CWE-400

Primary references