← CVE Intelligence

CVE-2025-8885

Possible DOS in processing specially formed ASN.1 Object Identifiers PUBLISHED

Description (CNA)

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdenti... https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.Java . This issue affects BC Java: from 1.0 through 1.77; BC-FJA: from 1.0.0 through 1.0.2.5, from 2.0.0 through 2.0.1.

Affected (CNA)

Vendor / productVersions
Legion of the Bouncy Castle Inc. / BC Javaaffected 1.0 through 1.77
Legion of the Bouncy Castle Inc. / BC-FJAaffected 1.0.0 through 1.0.2.5; affected 2.0.0 through 2.0.1

CWE

CWE-770

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.