CVE-2025-8885

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdenti... https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.Java .

This issue affects BC Java: from 1.0 through 1.77; BC-FJA: from 1.0.0 through 1.0.2.5, from 2.0.0 through 2.0.1.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8885.json",
    "cwe_ids": [
        "CWE-770"
    ],
    "cna_assigner": "bcorg",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.0.0"
                },
                {
                    "last_affected": "1.0.2.5"
                },
                {
                    "introduced": "2.0.0"
                },
                {
                    "last_affected": "2.0.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/bcgit/bc-java

Affected ranges

Type

GIT

Repo

https://github.com/bcgit/bc-java

Events

Introduced

Last affected

f1367f0b89962b29460eea381a12063fa7cd2428

Database specific

{
    "extracted_events": [
        {
            "introduced": "1.0"
        },
        {
            "last_affected": "1.77"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

Other

r1rv73

r1rv74

r1rv75

r1rv76

r1rv77

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8885.json"