Unrated severityOSV Advisory· Published Aug 4, 2026
Debian bouncycastle: In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-decla…
CVE-2026-12852
Description
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
Affected products
2- Range: r1rv84, r1rv81, r1rv83, …
- Range: <1.85
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.