Uncontrolled Resource Consumption Vulnerability in Bouncy Castle for Java by Legion of the Bouncy Castle Inc.

CVE-2025-12194

What is CVE-2025-12194?

This vulnerability arises from excessive resource allocation in Bouncy Castle for Java, particularly in its encryption and hashing modules. It impacts several API files across both the FIPS and LTS versions of Bouncy Castle, potentially allowing attackers to exploit this flaw for denial of service attacks or to exhaust system resources. Developers and organizations using the Bouncy Castle libraries should prioritize updates to mitigate these risks, as this vulnerability could lead to significant operational impairments.

References