NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-3505
Summary

Allocation of resources without limits or throttling vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules).This issue affects BC-JAVA: before 1.84.

Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

Publication Date April 15, 2026, 7:16 p.m.
Registration Date April 17, 2026, 4:11 a.m.
Last Update April 18, 2026, 12:38 a.m.
Related information, measures and tools
Common Vulnerabilities List