CVE-2026-17507 | Legion of the Bouncy Castle Bouncy Castle Java up to 1.85 Mls Leaf Index leaf_index integer overflow

October 2, 2026 Yanac

A vulnerability was found in Legion of the Bouncy Castle Bouncy Castle Java up to 1.85 and classified as problematic. This impacts the function GroupKeySet.SecretTree.hasLeaf/Group.validateRemove of the component Mls Leaf Index Handler. The manipulation of the argument leaf_index results in integer overflow.

This vulnerability is cataloged as CVE-2026-17507. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More