Medium severityGHSA Advisory· Published Aug 22, 2025· Updated Apr 15, 2026
CVE-2025-9341
CVE-2025-9341
Description
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files org/bouncycastle/crypto/fips/AESNativeCBC.Java, org/bouncycastle/crypto/engines/AESNativeCBC.Java.
This issue affects Bouncy Castle for Java FIPS: 2.1.0; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.bouncycastle:bc-fipsMaven | >= 2.1.0, < 2.1.1 | 2.1.1 |
org.bouncycastle:bctls-fipsMaven | >= 2.73.7, < 2.73.8 | 2.73.8 |
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/advisories/GHSA-jfcv-jv9g-2vx2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-9341ghsaADVISORY
News mentions
0No linked articles in our index yet.