Feed/CVE-2025-14813
CVE-2025-14813HIGHCVSS 7.5

Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks

Published Apr 17, 2026·Updated Aug 18, 2026

NVD Description

The GOST 28147-2015 CTR mode implementation (`G3413CTRBlockCipher`) in the Legion of the Bouncy Castle BC-JAVA `bcprov` core module only increments the final byte of the counter, so the counter wraps after 255 blocks and the keystream is reused. Reusing CTR keystream allows an attacker who can observe two ciphertexts produced with the same key/IV to recover the XOR of the plaintexts, breaking confidentiality. Affects BC-JAVA from 1.59 before 1.84 (with backported fixes in 1.80.2 and 1.81.1).

Affected Packages (12)

org.bouncycastle:bcprov-ext-jdk18onMAVEN
From 1.59
Fixed in = 1.78.1
org.bouncycastle:bcprov-ext-jdk15to18MAVEN
From 1.59
Fixed in = 1.78.1
org.bouncycastle:bcprov-ext-debug-jdk18onMAVEN
From 1.59
Fixed in = 1.77
org.bouncycastle:bcprov-jdk14MAVEN
No fix available
org.bouncycastle:bcprov-debug-jdk15to18MAVEN
From 1.59
Fixed in = 1.80.1
org.bouncycastle:bcprov-jdk18onMAVEN
Fixed in 1.81.1
org.bouncycastle:bcprov-jdk15to18MAVEN
No fix available
org.bouncycastle:bcprov-ext-debug-jdk14MAVEN
From 1.59
Fixed in = 1.74
org.bouncycastle:bcprov-ext-jdk14MAVEN
From 1.59
Fixed in = 1.78.1
org.bouncycastle:bcprov-debug-jdk18onMAVEN
From 1.59
Fixed in = 1.80.1
org.bouncycastle:bcprov-debug-jdk14MAVEN
No fix available
org.bouncycastle:bcprov-ext-debug-jdk15to18MAVEN
From 1.59
Fixed in = 1.77

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free