All vulnerabilities
CVE-2025-14813GHSA-574f-3g2m-x479

org.bouncycastle:bcprov-jdk14: Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks

Legion of the Bouncy Castle Inc. org.bouncycastle:bcprov-jdk14mavenLibraries & packages
CVSS
9.3Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.32%Chance of exploitation activity in the next 30 days, higher than 23% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.80.2Also 1.81.1, 1.84GitHub
Published15 Apr 2026Updated 24 Sep 2026CVE List

What fixes it

  • 1.80.2org.bouncycastle:bcprov-jdk18on, mavenGitHub<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk18on</artifactId><version>1.80.2</version></dependency>
  • 1.81.1org.bouncycastle:bcprov-jdk18on, mavenGitHub<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk18on</artifactId><version>1.81.1</version></dependency>
  • 1.84org.bouncycastle:bcprov-jdk14, mavenGitHub<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk14</artifactId><version>1.84</version></dependency>
  • 1.84org.bouncycastle:bcprov-jdk15to18, mavenGitHub<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk15to18</artifactId><version>1.84</version></dependency>
  • 1.84org.bouncycastle:bcprov-jdk18on, mavenGitHub<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk18on</artifactId><version>1.84</version></dependency>
  • 1.84org.bouncycastle:bcprov-debug-jdk14, mavenGitHub<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-debug-jdk14</artifactId><version>1.84</version></dependency>
Show all 19 fixed versions
  • 1.84org.bouncycastle:bcprov-debug-jdk15to18, mavenGitHub<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-debug-jdk15to18</artifactId><version>1.84</version></dependency>
  • 1.84org.bouncycastle:bcprov-debug-jdk18on, mavenGitHub<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-debug-jdk18on</artifactId><version>1.84</version></dependency>
  • 1.80.2BC-JAVACVE List
  • 1.81.1BC-JAVACVE List
  • 1.84BC-JAVACVE List
  • 1.80.2org.bouncycastle:bcprov-jdk18on, MavenOSV<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk18on</artifactId><version>1.80.2</version></dependency>
  • 1.81.1org.bouncycastle:bcprov-jdk18on, MavenOSV<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk18on</artifactId><version>1.81.1</version></dependency>
  • 1.84org.bouncycastle:bcprov-jdk14, MavenOSV<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk14</artifactId><version>1.84</version></dependency>
  • 1.84org.bouncycastle:bcprov-jdk15to18, MavenOSV<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk15to18</artifactId><version>1.84</version></dependency>
  • 1.84org.bouncycastle:bcprov-jdk18on, MavenOSV<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk18on</artifactId><version>1.84</version></dependency>
  • 1.84org.bouncycastle:bcprov-debug-jdk14, MavenOSV<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-debug-jdk14</artifactId><version>1.84</version></dependency>
  • 1.84org.bouncycastle:bcprov-debug-jdk15to18, MavenOSV<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-debug-jdk15to18</artifactId><version>1.84</version></dependency>
  • 1.84org.bouncycastle:bcprov-debug-jdk18on, MavenOSV<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-debug-jdk18on</artifactId><version>1.84</version></dependency>

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

The GOST 28147-2015 CTR mode implementation (G3413CTRBlockCipher) in the Legion of the Bouncy Castle BC-JAVA bcprov core module only increments the final byte of the counter, so the counter wraps after 255 blocks and the keystream is reused. Reusing CTR keystream allows an attacker who can observe two ciphertexts produced with the same key/IV to recover the XOR of the plaintexts, breaking confidentiality. Affects BC-JAVA from 1.59 before 1.84 (with backported fixes in 1.80.2 and 1.81.1).

Text from CVE List

Affected versions 221

  • org.bouncycastle:bcprov-jdk14, maven>= 1.59, <= 1.80.1GitHub
  • org.bouncycastle:bcprov-jdk15to18, maven>= 1.59, <= 1.80.1GitHub
  • org.bouncycastle:bcprov-jdk18on, maven>= 1.59, <= 1.80.1GitHub
  • org.bouncycastle:bcprov-debug-jdk14, maven>= 1.59, <= 1.80.1GitHub
  • org.bouncycastle:bcprov-debug-jdk15to18, maven>= 1.59, <= 1.80.1GitHub
  • org.bouncycastle:bcprov-debug-jdk18on, maven>= 1.59, <= 1.80.1GitHub
  • org.bouncycastle:bcprov-ext-jdk14, maven>= 1.59, <= 1.78.1GitHub
  • org.bouncycastle:bcprov-ext-jdk15to18, maven>= 1.59, <= 1.78.1GitHub
  • org.bouncycastle:bcprov-ext-jdk18on, maven>= 1.59, <= 1.78.1GitHub
  • org.bouncycastle:bcprov-ext-debug-jdk14, maven>= 1.59, <= 1.74GitHub
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, maven>= 1.59, <= 1.77GitHub
  • org.bouncycastle:bcprov-ext-debug-jdk18on, maven>= 1.59, <= 1.77GitHub
  • org.bouncycastle:bcprov-jdk14, maven= 1.81.0GitHub
  • org.bouncycastle:bcprov-jdk15to18, maven= 1.81.0GitHub
  • org.bouncycastle:bcprov-jdk18on, maven= 1.81.0GitHub
  • org.bouncycastle:bcprov-debug-jdk14, maven= 1.81.0GitHub
  • org.bouncycastle:bcprov-debug-jdk15to18, maven= 1.81.0GitHub
  • org.bouncycastle:bcprov-debug-jdk18on, maven= 1.81.0GitHub
  • org.bouncycastle:bcprov-jdk14, maven>= 1.82, <= 1.83GitHub
  • org.bouncycastle:bcprov-jdk15to18, maven>= 1.82, <= 1.83GitHub
  • org.bouncycastle:bcprov-jdk18on, maven>= 1.82, <= 1.83GitHub
  • org.bouncycastle:bcprov-debug-jdk14, maven>= 1.82, <= 1.83GitHub
  • org.bouncycastle:bcprov-debug-jdk15to18, maven>= 1.82, <= 1.83GitHub
  • org.bouncycastle:bcprov-debug-jdk18on, maven>= 1.82, <= 1.83GitHub
  • org.bouncycastle:bcprov-debug-jdk15on, maven<= 1.7.0GitHub
  • org.bouncycastle:bcprov-jdk15on, maven<= 1.7.0GitHub
  • BC-JAVAaffected: 1.59 before 1.80.2CVE List
  • BC-JAVAaffected: 1.81 before 1.81.1CVE List
  • BC-JAVAaffected: 1.82 before 1.84CVE List
  • org.bouncycastle:bcprov-jdk14, Mavenfrom 1.59, through 1.80.1OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.59OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.60OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.61OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.62OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.63OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.64OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.65OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.67OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.68OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.69OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.70OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.71OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.72OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.73OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.74OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.75OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.76OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.77OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.78OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.78.1OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.79OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.80OSV
  • org.bouncycastle:bcprov-jdk15to18, Mavenfrom 1.59, through 1.80.1OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.63OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.64OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.65OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.66OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.67OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.68OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.69OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.70OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.71OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.72OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.73OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.74OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.75OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.76OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.77OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.78OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.78.1OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.79OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.80OSV
  • org.bouncycastle:bcprov-jdk18on, Mavenfrom 1.59, fixed in 1.80.2OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.71OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.71.1OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.72OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.73OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.74OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.75OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.76OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.77OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.78OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.78.1OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.79OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.80OSV
  • org.bouncycastle:bcprov-debug-jdk14, Mavenfrom 1.59, through 1.80.1OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.59OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.60OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.64OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.68OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.69OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.70OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.71OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.72OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.73OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.74OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.78OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.79OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.80OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Mavenfrom 1.59, through 1.80.1OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.64OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.68OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.69OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.70OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.71OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.72OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.73OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.74OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.75OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.76OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.77OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.78OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.78.1OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.79OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Mavenfrom 1.59, through 1.80.1OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.71OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.72OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.73OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.74OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.75OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.76OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.77OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.78OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.78.1OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.79OSV
  • org.bouncycastle:bcprov-ext-jdk14, Mavenfrom 1.59, through 1.78.1OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.60OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.64OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.65OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.67OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.68OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.69OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.70OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.71OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.72OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.73OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.75OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.76OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.78OSV
  • org.bouncycastle:bcprov-ext-jdk14, Maven1.78.1OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Mavenfrom 1.59, through 1.78.1OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.64OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.67OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.68OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.69OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.70OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.71OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.72OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.73OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.74OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.75OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.76OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.77OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.78OSV
  • org.bouncycastle:bcprov-ext-jdk15to18, Maven1.78.1OSV
  • org.bouncycastle:bcprov-ext-jdk18on, Mavenfrom 1.59, through 1.78.1OSV
  • org.bouncycastle:bcprov-ext-jdk18on, Maven1.71OSV
  • org.bouncycastle:bcprov-ext-jdk18on, Maven1.72OSV
  • org.bouncycastle:bcprov-ext-jdk18on, Maven1.73OSV
  • org.bouncycastle:bcprov-ext-jdk18on, Maven1.74OSV
  • org.bouncycastle:bcprov-ext-jdk18on, Maven1.75OSV
  • org.bouncycastle:bcprov-ext-jdk18on, Maven1.76OSV
  • org.bouncycastle:bcprov-ext-jdk18on, Maven1.77OSV
  • org.bouncycastle:bcprov-ext-jdk18on, Maven1.78OSV
  • org.bouncycastle:bcprov-ext-jdk18on, Maven1.78.1OSV
  • org.bouncycastle:bcprov-ext-debug-jdk14, Mavenfrom 1.59, through 1.74OSV
  • org.bouncycastle:bcprov-ext-debug-jdk14, Maven1.60OSV
  • org.bouncycastle:bcprov-ext-debug-jdk14, Maven1.68OSV
  • org.bouncycastle:bcprov-ext-debug-jdk14, Maven1.69OSV
  • org.bouncycastle:bcprov-ext-debug-jdk14, Maven1.70OSV
  • org.bouncycastle:bcprov-ext-debug-jdk14, Maven1.71OSV
  • org.bouncycastle:bcprov-ext-debug-jdk14, Maven1.72OSV
  • org.bouncycastle:bcprov-ext-debug-jdk14, Maven1.73OSV
  • org.bouncycastle:bcprov-ext-debug-jdk14, Maven1.74OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Mavenfrom 1.59, through 1.77OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Maven1.68OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Maven1.69OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Maven1.70OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Maven1.71OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Maven1.72OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Maven1.73OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Maven1.74OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Maven1.75OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Maven1.76OSV
  • org.bouncycastle:bcprov-ext-debug-jdk15to18, Maven1.77OSV
  • org.bouncycastle:bcprov-ext-debug-jdk18on, Mavenfrom 1.59, through 1.77OSV
  • org.bouncycastle:bcprov-ext-debug-jdk18on, Maven1.71OSV
  • org.bouncycastle:bcprov-ext-debug-jdk18on, Maven1.72OSV
  • org.bouncycastle:bcprov-ext-debug-jdk18on, Maven1.73OSV
  • org.bouncycastle:bcprov-ext-debug-jdk18on, Maven1.74OSV
  • org.bouncycastle:bcprov-ext-debug-jdk18on, Maven1.75OSV
  • org.bouncycastle:bcprov-ext-debug-jdk18on, Maven1.76OSV
  • org.bouncycastle:bcprov-ext-debug-jdk18on, Maven1.77OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.81.0OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.81.0OSV
  • org.bouncycastle:bcprov-jdk18on, Mavenfrom 1.81.0, fixed in 1.81.1OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.81OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.81.0OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.81.0OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.81.0OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.81.0OSV
  • org.bouncycastle:bcprov-jdk14, Mavenfrom 1.82, fixed in 1.84OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.82OSV
  • org.bouncycastle:bcprov-jdk14, Maven1.83OSV
  • org.bouncycastle:bcprov-jdk15to18, Mavenfrom 1.82, fixed in 1.84OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.82OSV
  • org.bouncycastle:bcprov-jdk15to18, Maven1.83OSV
  • org.bouncycastle:bcprov-jdk18on, Mavenfrom 1.82, fixed in 1.84OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.82OSV
  • org.bouncycastle:bcprov-jdk18on, Maven1.83OSV
  • org.bouncycastle:bcprov-debug-jdk14, Mavenfrom 1.82, fixed in 1.84OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.82OSV
  • org.bouncycastle:bcprov-debug-jdk14, Maven1.83OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Mavenfrom 1.82, fixed in 1.84OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.82OSV
  • org.bouncycastle:bcprov-debug-jdk15to18, Maven1.83OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Mavenfrom 1.82, fixed in 1.84OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.82OSV
  • org.bouncycastle:bcprov-debug-jdk18on, Maven1.83OSV
  • org.bouncycastle:bcprov-debug-jdk15on, Mavenfrom first release, through 1.7.0OSV
  • org.bouncycastle:bcprov-jdk15on, Mavenfrom first release, through 1.7.0OSV

References 35