CVE-2026-58063
Received Received - Intake

BCFKS Keystore Unbounded KDF Cost in Bouncy Castle

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: bcorg

Description
In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-58063
EUVD
EUVD-2026-52088

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
bouncy_castle bouncy_castle_for_java to 1.85 (exc)
bouncy_castle bouncy_castle_for_java_lts to 2.73.12 (exc)
bouncy_castle bc_fips to 1.0.2.7 (exc)
bouncy_castle bc_fips to 2.0.2 (exc)
bouncy_castle bc_fips to 2.1.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Bouncy Castle for Java allows an attacker to manipulate the Key Derivation Function (KDF) cost parameter in a BCFKS keystore file. The system loads this untrusted file without proper bounds checking, potentially leading to excessive computational resource consumption during key derivation.

Detection Guidance

This vulnerability involves BCFKS keystore loading with unbounded KDF cost in Bouncy Castle libraries. Detection requires checking installed versions of Bouncy Castle libraries (Java, LTS, or FIPS variants) against affected versions. Use commands like 'mvn dependency:tree' for Maven projects or 'gradle dependencies' for Gradle to inspect library versions. Compare against versions 1.85 (Java), 2.73.12 (LTS), or specified FIPS versions.

Impact Analysis

An attacker could exploit this to cause denial-of-service by forcing the system to perform computationally expensive operations. This could slow down or crash applications using affected Bouncy Castle versions when processing malicious keystore files.

Compliance Impact

The vulnerability allows an attacker to manipulate the KDF cost parameter in a BCFKS keystore, potentially leading to denial-of-service or resource exhaustion. This could impact compliance by failing to meet availability requirements in standards like GDPR (Article 32) or HIPAA (Security Rule), which mandate safeguards for data integrity and availability.

Mitigation Strategies

Update Bouncy Castle for Java to version 1.85 or later, Bouncy Castle for Java LTS to 2.73.12 or later, and BC-FJA to 1.0.2.7 (1.0.X), 2.0.2 (2.0.X), or 2.1.3 (2.1.X) series. Avoid loading BCFKS keystores from untrusted sources.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58063. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart