High severity7.5NVD Advisory· Published Apr 15, 2026· Updated Sep 18, 2026
CVE-2025-14813
CVE-2025-14813
Description
: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules).
This vulnerability is associated with program files G3413CTRBlockCipher.
This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22(expand)+ 1 more
- (no CPE)
- (no CPE)range: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84
- osv-coords20 versionspkg:apk/chainguard/hadoop-fips-3.4.2pkg:apk/chainguard/logstash-8.19pkg:apk/chainguard/logstash-8.19-iamguarded-compatpkg:apk/chainguard/logstash-8.19-with-output-opensearchpkg:apk/chainguard/logstash-9.3pkg:apk/chainguard/logstash-9.3-iamguarded-compatpkg:apk/chainguard/logstash-9.4pkg:apk/chainguard/logstash-9.4-iamguarded-compatpkg:apk/chainguard/logstash-fips-9.4pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compatpkg:apk/chainguard/opensearch-2-identity-shiropkg:apk/chainguard/opensearch-2-ingest-attachmentpkg:apk/chainguard/opensearch-2-sqlpkg:apk/chainguard/sonarqubepkg:apk/wolfi/logstash-9.3pkg:apk/wolfi/logstash-9.3-iamguarded-compatpkg:apk/wolfi/logstash-9.4pkg:apk/wolfi/logstash-9.4-iamguarded-compatpkg:apk/wolfi/sonarqubepkg:rpm/opensuse/bouncycastle&distro=openSUSE%20Tumbleweed
< 3.4.2-r5+ 19 more
- (no CPE)range: < 3.4.2-r5
- (no CPE)range: < 8.19.19-r0
- (no CPE)range: < 8.19.19-r0
- (no CPE)range: < 8.19.19-r0
- (no CPE)range: < 9.3.8-r0
- (no CPE)range: < 9.3.8-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 2.19.6-r0
- (no CPE)range: < 2.19.6-r0
- (no CPE)range: < 2.19.6-r0
- (no CPE)range: < 26.6.0.123539-r1
- (no CPE)range: < 9.3.8-r0
- (no CPE)range: < 9.3.8-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 26.6.0.123539-r1
- (no CPE)range: < 1.84-1.1
Patches
Vulnerability mechanics
References
34- github.com/advisories/GHSA-574f-3g2m-x479ghsaADVISORY
- access.redhat.com/errata/RHSA-2026:11720nvd
- access.redhat.com/errata/RHSA-2026:11721nvd
- access.redhat.com/errata/RHSA-2026:13631nvd
- access.redhat.com/errata/RHSA-2026:14272nvd
- access.redhat.com/errata/RHSA-2026:14276nvd
- access.redhat.com/errata/RHSA-2026:17668nvd
- access.redhat.com/errata/RHSA-2026:18054nvd
- access.redhat.com/errata/RHSA-2026:18055nvd
- access.redhat.com/errata/RHSA-2026:18059nvd
- access.redhat.com/errata/RHSA-2026:21772nvd
- access.redhat.com/errata/RHSA-2026:24977nvd
- access.redhat.com/errata/RHSA-2026:53644nvd
- access.redhat.com/errata/RHSA-2026:53645nvd
- access.redhat.com/errata/RHSA-2026:53646nvd
- access.redhat.com/errata/RHSA-2026:53806ghsa
- access.redhat.com/errata/RHSA-2026:60239nvd
- access.redhat.com/errata/RHSA-2026:60246nvd
- access.redhat.com/errata/RHSA-2026:60247nvd
- access.redhat.com/errata/RHSA-2026:60248nvd
- access.redhat.com/errata/RHSA-2026:60249nvd
- access.redhat.com/errata/RHSA-2026:60250nvd
- access.redhat.com/errata/RHSA-2026:60251nvd
- access.redhat.com/errata/RHSA-2026:60252nvd
- access.redhat.com/errata/RHSA-2026:60254nvd
- access.redhat.com/errata/RHSA-2026:60256nvd
- access.redhat.com/errata/RHSA-2026:60259nvd
- access.redhat.com/errata/RHSA-2026:66488nvd
- access.redhat.com/security/cve/CVE-2025-14813nvd
- bugzilla.redhat.com/show_bug.cginvd
- github.com/bcgit/bc-java/commit/701686cb0184cd9ae103c801b3581fdf95c6d4f3nvd
- github.com/bcgit/bc-java/commit/b42574345414e4b7c8051b16fa1fafe01c29871fnvd
- nvd.nist.gov/vuln/detail/CVE-2025-14813ghsa
- security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14813.jsonnvd
News mentions
0No linked articles in our index yet.