PT-2026-33028 · Bouncy Castle · Bc-Java

Xlabai Team · Published 2026-04-15 · Updated 2026-05-19 · CVE-2025-14813

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions BC-JAVA versions 1.59 through 1.83

Description The GOSTCTR implementation in the G3413CTRBlockCipher program files is unable to process more than 255 blocks correctly, resulting in the use of a broken or risky cryptographic algorithm.

Recommendations Update to version 1.84.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2025-14813

OPENSUSE-SU-2026:10571-1

RHSA-2026:18054

RHSA-2026:18055

Affected Products

Bc-Java

References · 14

• 🔥 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813 · Exploit
• https://github.com/bcgit/bc-java/commit/701686cb0184cd9ae103c801b3581fdf95c6d4f3 · Patch
• https://github.com/bcgit/bc-java/commit/b42574345414e4b7c8051b16fa1fafe01c29871f · Patch
• https://ubuntu.com/security/CVE-2025-14813 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14813 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-14813 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-14813 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10571-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-5598 · Note
• https://suse.com/security/cve/CVE-2025-14813 · Note
• https://suse.com/security/cve/CVE-2026-3505 · Note
• https://t.me/cveNotify/163940 · Telegram Post
• https://suse.com/security/cve/CVE-2026-5588 · Note
• https://suse.com/security/cve/CVE-2026-0636 · Note