CVE-2026-63574 | Legion of the Bouncy Castle bc-csharp up to 2.6.x OpenPGP Subpacket Parsers memory allocation

A vulnerability was found in Legion of the Bouncy Castle bc-csharp up to 2.6.x. It has been declared as problematic. Affected by this vulnerability is the function SignatureSubpacketsParser.ReadPacket/UserAttributeSubpacketsParser.ReadPacket of the component OpenPGP Subpacket Parsers. Such manipulation leads to uncontrolled memory allocation.

This vulnerability is documented as CVE-2026-63574. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More