CVE-2026-12852
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 03, 2026
Vendor
unknown
Description
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.