High severity7.5NVD Advisory· Published Apr 15, 2026· Updated Aug 12, 2026
CVE-2025-14813
CVE-2025-14813
Description
: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules).
This vulnerability is associated with program files G3413CTRBlockCipher.
This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.bouncycastle:bcprov-jdk14Maven | >= 1.59, <= 1.80.1 | — |
org.bouncycastle:bcprov-jdk15to18Maven | >= 1.59, <= 1.80.1 | — |
org.bouncycastle:bcprov-jdk18onMaven | >= 1.59, < 1.80.2 | 1.80.2 |
org.bouncycastle:bcprov-debug-jdk14Maven | >= 1.59, <= 1.80.1 | — |
org.bouncycastle:bcprov-debug-jdk15to18Maven | >= 1.59, <= 1.80.1 | — |
org.bouncycastle:bcprov-debug-jdk18onMaven | >= 1.59, <= 1.80.1 | — |
org.bouncycastle:bcprov-ext-jdk14Maven | >= 1.59, <= 1.78.1 | — |
org.bouncycastle:bcprov-ext-jdk15to18Maven | >= 1.59, <= 1.78.1 | — |
org.bouncycastle:bcprov-ext-jdk18onMaven | >= 1.59, <= 1.78.1 | — |
org.bouncycastle:bcprov-ext-debug-jdk14Maven | >= 1.59, <= 1.74 | — |
org.bouncycastle:bcprov-ext-debug-jdk15to18Maven | >= 1.59, <= 1.77 | — |
org.bouncycastle:bcprov-ext-debug-jdk18onMaven | >= 1.59, <= 1.77 | — |
org.bouncycastle:bcprov-jdk18onMaven | >= 1.81.0, < 1.81.1 | 1.81.1 |
org.bouncycastle:bcprov-jdk14Maven | >= 1.82, < 1.84 | 1.84 |
org.bouncycastle:bcprov-jdk15to18Maven | >= 1.82, < 1.84 | 1.84 |
org.bouncycastle:bcprov-jdk18onMaven | >= 1.82, < 1.84 | 1.84 |
org.bouncycastle:bcprov-debug-jdk14Maven | >= 1.82, < 1.84 | 1.84 |
org.bouncycastle:bcprov-debug-jdk15to18Maven | >= 1.82, < 1.84 | 1.84 |
org.bouncycastle:bcprov-debug-jdk18onMaven | >= 1.82, < 1.84 | 1.84 |
Affected products
22(expand)+ 1 more
- (no CPE)
- (no CPE)range: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84
- osv-coords20 versionspkg:apk/chainguard/hadoop-fips-3.4.2pkg:apk/chainguard/logstash-8.19pkg:apk/chainguard/logstash-8.19-iamguarded-compatpkg:apk/chainguard/logstash-8.19-with-output-opensearchpkg:apk/chainguard/logstash-9.3pkg:apk/chainguard/logstash-9.3-iamguarded-compatpkg:apk/chainguard/logstash-9.4pkg:apk/chainguard/logstash-9.4-iamguarded-compatpkg:apk/chainguard/logstash-fips-9.4pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compatpkg:apk/chainguard/opensearch-2-identity-shiropkg:apk/chainguard/opensearch-2-ingest-attachmentpkg:apk/chainguard/opensearch-2-sqlpkg:apk/chainguard/sonarqubepkg:apk/wolfi/logstash-9.3pkg:apk/wolfi/logstash-9.3-iamguarded-compatpkg:apk/wolfi/logstash-9.4pkg:apk/wolfi/logstash-9.4-iamguarded-compatpkg:apk/wolfi/sonarqubepkg:rpm/opensuse/bouncycastle&distro=openSUSE%20Tumbleweed
< 3.4.2-r5+ 19 more
- (no CPE)range: < 3.4.2-r5
- (no CPE)range: < 8.19.19-r0
- (no CPE)range: < 8.19.19-r0
- (no CPE)range: < 8.19.19-r0
- (no CPE)range: < 9.3.8-r0
- (no CPE)range: < 9.3.8-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 2.19.6-r0
- (no CPE)range: < 2.19.6-r0
- (no CPE)range: < 2.19.6-r0
- (no CPE)range: < 26.6.0.123539-r1
- (no CPE)range: < 9.3.8-r0
- (no CPE)range: < 9.3.8-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 9.4.4-r0
- (no CPE)range: < 26.6.0.123539-r1
- (no CPE)range: < 1.84-1.1
Patches
Vulnerability mechanics
References
20- github.com/advisories/GHSA-574f-3g2m-x479ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-14813ghsaADVISORY
- access.redhat.com/errata/RHSA-2026:11720nvdWEB
- access.redhat.com/errata/RHSA-2026:11721nvdWEB
- access.redhat.com/errata/RHSA-2026:13631nvdWEB
- access.redhat.com/errata/RHSA-2026:14272nvdWEB
- access.redhat.com/errata/RHSA-2026:14276nvdWEB
- access.redhat.com/errata/RHSA-2026:17668nvdWEB
- access.redhat.com/errata/RHSA-2026:18054nvdWEB
- access.redhat.com/errata/RHSA-2026:18055nvdWEB
- access.redhat.com/errata/RHSA-2026:18059nvdWEB
- access.redhat.com/errata/RHSA-2026:21772nvdWEB
- access.redhat.com/errata/RHSA-2026:24977nvdWEB
- access.redhat.com/security/cve/CVE-2025-14813nvdWEB
- bugzilla.redhat.com/show_bug.cginvdWEB
- github.com/bcgit/bc-java/commit/701686cb0184cd9ae103c801b3581fdf95c6d4f3nvdWEB
- github.com/bcgit/bc-java/commit/b42574345414e4b7c8051b16fa1fafe01c29871fnvdWEB
- security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14813.jsonnvdWEB
- access.redhat.com/errata/RHSA-2026:53644nvd
- access.redhat.com/errata/RHSA-2026:53806nvd
News mentions
0No linked articles in our index yet.