CVE-2025-14813

EUVD-2025-209467
: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules).

 This vulnerability is associated with program files G3413CTRBlockCipher.



This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
bouncycastle
Amazon Linux 2023
0:1.70-4.amzn2023.0.6
fixed
bouncycastle-javadoc
Amazon Linux 2023
0:1.70-4.amzn2023.0.6
fixed
bouncycastle-mail
Amazon Linux 2023
0:1.70-4.amzn2023.0.6
fixed
bouncycastle-pg
Amazon Linux 2023
0:1.70-4.amzn2023.0.6
fixed
bouncycastle-pkix
Amazon Linux 2023
0:1.70-4.amzn2023.0.6
fixed
bouncycastle-tls
Amazon Linux 2023
0:1.70-4.amzn2023.0.6
fixed
bouncycastle-util
Amazon Linux 2023
0:1.70-4.amzn2023.0.6
fixed
Common Weakness Enumeration
References
https://github.com/bcgit/bc-java/commit/701686cb0184cd9ae103c801b3581fdf95c6d4f3
https://github.com/bcgit/bc-java/commit/b42574345414e4b7c8051b16fa1fafe01c29871f
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813
https://access.redhat.com/errata/RHSA-2026:11720
https://access.redhat.com/errata/RHSA-2026:11721
https://access.redhat.com/errata/RHSA-2026:13631
https://access.redhat.com/errata/RHSA-2026:14272
https://access.redhat.com/errata/RHSA-2026:14276
https://access.redhat.com/errata/RHSA-2026:17668
https://access.redhat.com/errata/RHSA-2026:18054
https://access.redhat.com/errata/RHSA-2026:18055
https://access.redhat.com/errata/RHSA-2026:18059
https://access.redhat.com/errata/RHSA-2026:21772
https://access.redhat.com/errata/RHSA-2026:24977
https://access.redhat.com/security/cve/CVE-2025-14813
https://bugzilla.redhat.com/show_bug.cgi?id=2458640
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14813.json