CVE-2026-15997
CVE-2026-15997 · Native ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded state
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffers. This vulnerability is associated with program files https://github.Com/bcgit/bc-lts-java/blob/main/native_c/arm/sha/shake.C, https://github.Com/bcgit/bc-lts-java/blob/main/native_c/arm/sha/sha3.C. This issue affects BC-LTS: from 2.73.0 before 2.73.12.1. Issue is only applicable if application involved is accepting memoable SHA3 / SHAKE states from potentially untrusted sources.
CVSS 1.7 · Low · EPSS 0.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
bc-lts
- Versions
- ≥ 2.73.0, < 2.73.12.1: Affected (semver)
Update to 2.73.12.1
bouncycastle Ubuntu:Pro:16.04:LTS
- Versions
- 1.49+dfsg-3ubuntu1
- 1.51-4ubuntu1
- 1.51-4ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bouncycastle Ubuntu:Pro:18.04:LTS
- Versions
- 1.57-1
- 1.58-1
- 1.59-1
- 1.59-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bouncycastle Ubuntu:Pro:20.04:LTS
- Versions
- 1.61-1
- 1.61-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bouncycastle Ubuntu:Pro:22.04:LTS
- Versions
- 1.68-2
- 1.68-4
- 1.68-5
- 1.68-5ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bouncycastle Ubuntu:Pro:24.04:LTS
- Versions
- 1.72-2
- 1.77-1
- 1.77-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bouncycastle Ubuntu:26.10
- Versions
- 1.80-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bouncycastle Ubuntu:26.04:LTS
- Versions
- 1.80-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published