VULNERABILITY INTELLIGENCE

CVE-2025-9340

EPSS probability0.18%
CISA KEVNot currently listed
Published2025-08-22
Last modified2026-06-17

Description

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0.

Weakness classification

  • 91579145-5d7b-4cc5-b925-a0262ff19630: CWE-787

Primary references