high7.5
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
Impact
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bouncycastle | Bc-Java | before 1.85 |