NetSight
IP …
critical7.5

CVE-2025-14813

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc.

Impact

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.bouncycastle:bcprov-jdk14>= 1.59, <= 1.80.1none recorded
mavenorg.bouncycastle:bcprov-jdk15to18>= 1.59, <= 1.80.1none recorded
mavenorg.bouncycastle:bcprov-jdk18on>= 1.59, <= 1.80.11.80.2
mavenorg.bouncycastle:bcprov-debug-jdk14>= 1.59, <= 1.80.1none recorded
mavenorg.bouncycastle:bcprov-debug-jdk15to18>= 1.59, <= 1.80.1none recorded
mavenorg.bouncycastle:bcprov-debug-jdk18on>= 1.59, <= 1.80.1none recorded
mavenorg.bouncycastle:bcprov-ext-jdk14>= 1.59, <= 1.78.1none recorded
mavenorg.bouncycastle:bcprov-ext-jdk15to18>= 1.59, <= 1.78.1none recorded
mavenorg.bouncycastle:bcprov-ext-jdk18on>= 1.59, <= 1.78.1none recorded
mavenorg.bouncycastle:bcprov-ext-debug-jdk14>= 1.59, <= 1.74none recorded
mavenorg.bouncycastle:bcprov-ext-debug-jdk15to18>= 1.59, <= 1.77none recorded
mavenorg.bouncycastle:bcprov-ext-debug-jdk18on>= 1.59, <= 1.77none recorded
mavenorg.bouncycastle:bcprov-debug-jdk15on<= 1.7.0none recorded
mavenorg.bouncycastle:bcprov-jdk15on<= 1.7.0none recorded

Weakness classification

CWE-323CWE-327

References