CVE-2025-14813

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
References
Link Resource
https://github.com/bcgit/bc-java/commit/701686cb0184cd9ae103c801b3581fdf95c6d4f3
https://github.com/bcgit/bc-java/commit/b42574345414e4b7c8051b16fa1fafe01c29871f
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813
https://access.redhat.com/errata/RHSA-2026:11720
https://access.redhat.com/errata/RHSA-2026:11721
https://access.redhat.com/errata/RHSA-2026:13631
https://access.redhat.com/errata/RHSA-2026:14272
https://access.redhat.com/errata/RHSA-2026:14276
https://access.redhat.com/errata/RHSA-2026:17668
https://access.redhat.com/errata/RHSA-2026:18054
https://access.redhat.com/errata/RHSA-2026:18055
https://access.redhat.com/errata/RHSA-2026:18059
https://access.redhat.com/errata/RHSA-2026:21772
https://access.redhat.com/errata/RHSA-2026:24977
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:60239
https://access.redhat.com/errata/RHSA-2026:60246
https://access.redhat.com/errata/RHSA-2026:60247
https://access.redhat.com/errata/RHSA-2026:60248
https://access.redhat.com/errata/RHSA-2026:60249
https://access.redhat.com/errata/RHSA-2026:60250
https://access.redhat.com/errata/RHSA-2026:60251
https://access.redhat.com/errata/RHSA-2026:60252
https://access.redhat.com/errata/RHSA-2026:60254
https://access.redhat.com/errata/RHSA-2026:60256
https://access.redhat.com/errata/RHSA-2026:60259
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/security/cve/CVE-2025-14813
https://bugzilla.redhat.com/show_bug.cgi?id=2458640
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14813.json
Configurations

No configuration.

History

30 Sep 2026, 22:10

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de uso de un algoritmo criptográfico roto o arriesgado en Legion of the Bouncy Castle Inc. BC-JAVA bcprov en todos (módulos centrales). Esta vulnerabilidad está asociada con los archivos de programa G3413CTRBlockCipher. La implementación de GOSTCTR es incapaz de procesar más de 255 bloques correctamente. Este problema afecta a BC-JAVA: desde 1.59 antes de 1.84.

18 Sep 2026, 13:17

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2026:53806', 'source': '0b0ca135-0b70-47e7-9f44-1890c2a1c46c'}
  • () https://access.redhat.com/errata/RHSA-2026:53645 -
  • () https://access.redhat.com/errata/RHSA-2026:53646 -

Information

Published : 2026-04-15 10:16

Updated : 2026-10-07 09:10


NVD link : CVE-2025-14813

Mitre link : CVE-2025-14813

CVE.ORG link : CVE-2025-14813


JSON object : View

Products Affected

No product.

CWE
CWE-327

Use of a Broken or Risky Cryptographic Algorithm