← CVE Intelligence

CVE-2025-14813

GOSTCTR implementation unable to process more than 255 blocks correctly PUBLISHED

Description (CNA)

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

Affected (CNA)

Vendor / productVersions
Legion of the Bouncy Castle Inc. / BC-JAVAaffected 1.59 before 1.80.2; affected 1.81 before 1.81.1; affected 1.82 before 1.84

CWE

CWE-327

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The `GOSTCTR` implementation is unable to securely process more than 255 blocks of data due to keystream reuse. This issue allows an attacker to break the fundamental confidentiality of any data protected by the `G3413CTRBlockCipher`, potentially leading to the recovery and access of encrypted data.