CVE-2026-71883 | Legion of the Bouncy Castle BC-LTS-JAVA up to 2.73.12 One-Shot Native Packet Ciphers KeyParameter.getKey buffer overflow

October 3, 2026 Yanac

A vulnerability classified as critical has been found in Legion of the Bouncy Castle BC-LTS-JAVA up to 2.73.12. Affected is the function KeyParameter.getKey of the component One-Shot Native Packet Ciphers. This manipulation causes buffer overflow.

This vulnerability is registered as CVE-2026-71883. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More