In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
Info
Summary
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://github.com/bcgit/bc-java/commit/610d8757d855afe197df0de6d831cb75c81e3b9f
- https://github.com/bcgit/bc-java/wiki/CVE-2026-59644
Timeline
- nvd_ingest NVD