CVE-2026-103603 | Legion of the Bouncy Castle bc-csharp up to 2.6.x HSS/LMS Signature Code memory allocation

A vulnerability described as problematic has been identified in Legion of the Bouncy Castle bc-csharp up to 2.6.x. This vulnerability affects unknown code of the component HSS/LMS Signature Code. The manipulation results in uncontrolled memory allocation.

This vulnerability was named CVE-2026-103603. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More