CVE-2025-14813

HighCVSS 7.5

Published: 15/04/2026(UTC)Updated: 11/09/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Summary

A vulnerability in the BC-JAVA bcprov library (core modules) involves the use of a broken or risky cryptographic algorithm in the G3413CTRBlockCipher program files. It affects versions from 1.59 to 1.80.2, from 1.81 to 1.81.1, and from 1.82 to 1.84.

Risk Assessment

The risk is potential weakening of encryption security, which could lead to data confidentiality breaches or allow an attacker to decrypt protected information.

Recommendation

Immediately update the BC-JAVA library to version 1.80.2, 1.81.1, or 1.84 (depending on the branch) and verify that no vulnerable versions are in use.

Other vulnerabilities in BC-JAVA bcprov

CVE-2026-0636Medium
An LDAP injection vulnerability in the Legion of the Bouncy Castle Inc. BC-JAVA bcprov library affects all prov modules. The issue is associated with the LDAPStoreHelper program files.

Original NVD description (English source)

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.