CVE-2026-63575 | Legion of the Bouncy Castle bc-csharp up to 2.6.x PKCS#12 Key Derivation Pkcs12Store.Load infinite loop

October 2, 2026 Yanac

A vulnerability described as problematic has been identified in Legion of the Bouncy Castle bc-csharp up to 2.6.x. The affected element is the function Pkcs12Store.Load of the component PKCS#12 Key Derivation. Such manipulation leads to infinite loop.

This vulnerability is uniquely identified as CVE-2026-63575. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More