Vulnerability in BC-FJA BC-FIPS Affects Bouncy Castle Security Library
CVE-2026-8149

5.1MEDIUM

Key Information:

Vendor

Legion Of The Bouncy Castle Inc.

Status
Bc-lts
Bc-fja
Vendor
CVE Published:
8 May 2026

What is CVE-2026-8149?

A vulnerability exists in the BC-FJA BC-FIPS for Linux systems, particularly within the program files gcm128w and gcm512w. Affected versions range from 2.1.0 to 2.1.2, exposing systems to potential security risks. It is crucial for users to assess their installations and apply necessary mitigations.

Affected Version(s)

BC-FJA Linux 2.1.0 < 2.1.3

BC-LTS X86_64 2.73.0 < 2.73.11

References

https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2...
vendor-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Schäfer, Kiteworks
.