CVE-2026-5598

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-5598
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5598.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-5598
Aliases
Downstream
Related
Published
2026-04-15T09:05:56.277Z
Modified
2026-07-22T03:57:26.168768Z
Severity
  • 8.9 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red CVSS Calculator
Summary
Non-constant time comparisons risk private key leakage in FrodoKEM.
Details

Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).

This vulnerability is associated with program files FrodoEngine.Java.

This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5598.json",
    "cna_assigner": "bcorg",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "1.71"
                },
                {
                    "fixed": "1.80.2"
                },
                {
                    "introduced": "1.81"
                },
                {
                    "fixed": "1.81.1"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-385"
    ]
}
References

Affected packages

Git / github.com/bcgit/bc-java

Affected ranges

Type
GIT
Repo
https://github.com/bcgit/bc-java
Events
Introduced
de42702b6cda2631e8e3ff94f8458198860b328e
Fixed
d716d7716a452bad283323aefd88ff21eba8deef
Fixed
8692e6b2b191fc4aafa32545c7a78bdb9bf110c5
Fixed
94abbd56413dfdac651fd878bc60253871ef5e87
Database specific 
{
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.82"
        },
        {
            "fixed": "1.84"
        }
    ]
}

Affected versions

Other
r1rv82
r1rv83

Database specific

vanir_signatures 
[
    {
        "digest": {
            "length": 303.0,
            "function_hash": "163973598588319161711360540188991627769"
        },
        "signature_version": "v1",
        "source": "https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87",
        "signature_type": "Function",
        "target": {
            "function": "sample_matrix",
            "file": "core/src/main/java/org/bouncycastle/pqc/crypto/frodo/FrodoEngine.java"
        },
        "id": "CVE-2026-5598-0c329227",
        "deprecated": false
    },
    {
        "digest": {
            "length": 591.0,
            "function_hash": "159745705055286248628015620230754621298"
        },
        "signature_version": "v1",
        "source": "https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5",
        "signature_type": "Function",
        "target": {
            "function": "genMatrix",
            "file": "core/src/main/java/org/bouncycastle/pqc/crypto/frodo/FrodoMatrixGenerator.java"
        },
        "id": "CVE-2026-5598-47a81b06",
        "deprecated": false
    },
    {
        "digest": {
            "length": 306.0,
            "function_hash": "200967775042998598947451712049362369869"
        },
        "signature_version": "v1",
        "source": "https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87",
        "signature_type": "Function",
        "target": {
            "function": "sample",
            "file": "core/src/main/java/org/bouncycastle/pqc/crypto/frodo/FrodoEngine.java"
        },
        "id": "CVE-2026-5598-93f1c482",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "44075979019983172381968011422339639413",
                "283742363016946136642768130638961571513",
                "161044780520136252796361088435991478945",
                "69174166713242517247949348579061470937",
                "237280498547926980941798151879453754751",
                "62664362592712521971995540375505266597",
                "34675048271954231940670540548496151764",
                "90067095365670808363648185509124976633",
                "86517434022290054981040862987267196042",
                "113520614895262467310029340318143064696",
                "37840482392931420553304233404273156187",
                "177755392864874909284658614131317029121",
                "192998479702424690124593073204189987292",
                "7383622663368356398033951777962083826",
                "7117791792312551219535721697631986877",
                "336696824539523245748532211192526741548",
                "251513619240269551686138476903015633906",
                "90734980105108641312314776570203010901",
                "151211410662691437154795495454821270240",
                "72261861087767496622549659998296671511",
                "243818485438916857221670907340018824047",
                "101912332338862190315587018745575363409",
                "145074416672636268708036465811059262191"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87",
        "signature_type": "Line",
        "target": {
            "file": "core/src/main/java/org/bouncycastle/pqc/crypto/frodo/FrodoEngine.java"
        },
        "id": "CVE-2026-5598-d4c543cc",
        "deprecated": false
    },
    {
        "digest": {
            "length": 32.0,
            "function_hash": "190245899412705784213351568421130417899"
        },
        "signature_version": "v1",
        "source": "https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5",
        "signature_type": "Function",
        "target": {
            "function": "genMatrix",
            "file": "core/src/main/java/org/bouncycastle/pqc/crypto/frodo/FrodoMatrixGenerator.java"
        },
        "id": "CVE-2026-5598-e51008a0",
        "deprecated": false
    },
    {
        "digest": {
            "length": 579.0,
            "function_hash": "127032161112728274896292203012844791397"
        },
        "signature_version": "v1",
        "source": "https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5",
        "signature_type": "Function",
        "target": {
            "function": "genMatrix",
            "file": "core/src/main/java/org/bouncycastle/pqc/crypto/frodo/FrodoMatrixGenerator.java"
        },
        "id": "CVE-2026-5598-f3ccf2ff",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "221597074493886695467924030080232859574",
                "14848519377622312263613203949877004126",
                "248930699436226149823354017638581757630",
                "279963216682635227870097334100647801061",
                "40252020929961834665921774520681159769",
                "208612736129189935754252307494638468308",
                "181240403978254450914631049084464769823",
                "31324629212023805211342931578783601229",
                "325657888193070381649145493547545009456",
                "289773562150754185081276473000664595744",
                "101993169145803693345116748215167636621",
                "261958960580829304468383155728659949332",
                "54606102223621488197778923545771858021",
                "287459384317467629841819809202587454603",
                "254220479705980671961501076182961231656",
                "150198866673237701601716810618527613429",
                "48478084502342354529935356416249753939",
                "16911460372403137823651787635675116369",
                "267470074618381582573185234705298103390",
                "207115162820826167365733717876484459582",
                "300895274208847000529244991543038780044",
                "75355532044219965312828008317653476016",
                "232135671303458596311729157659046139116",
                "241249547149294607778656404114152737894",
                "52584923828131527534712112345559109823",
                "331353217217523550115362304734193924089",
                "100771343872963081622267360734963471347",
                "38367693306531583642406067019265639577",
                "102915726015172412996935110394004375536",
                "170460876588802289846963518200007315891",
                "68525799146659929395840407156213513443",
                "96965782551601567511286357917430969824",
                "300451311433301028911468811857742063648",
                "32391300326625889188797295563407354788",
                "87573449208130644642243091832690782444",
                "178964807328585247959720715480153164240",
                "3962354860363072203414672466684443895",
                "121630642233694046568673085339755098758",
                "304045094640533995975951482195172011634",
                "221748171025787691347371050260377682146",
                "60298672217816375843102409078787555891",
                "188358189534497995604280309025343877439",
                "80571247344680075767108229707467647386",
                "150198866673237701601716810618527613429",
                "48478084502342354529935356416249753939",
                "16911460372403137823651787635675116369",
                "60798732908226433100248552064539743949",
                "251642872997417931289231663692167168554",
                "103477153247239623137499678725985589756",
                "298887925998845899204540643449784615428",
                "324900351759986805545177580920914759698",
                "156266221463433218920194454603383200342",
                "254963531162232882988819282372376519343",
                "256392997785299782210250035087243232422",
                "4770665562539188085669996243049889351",
                "192657833193495279511040204460754233651",
                "200311778324439608086732029258105937831",
                "19249065674072142109465484246480506535",
                "230414197113301689833027382824896432878",
                "16416251724238211224998589134409017975",
                "38503300723171477500523457264738650591",
                "222620841794736441138952853023177045643",
                "318472599981297088183679409819868005822"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5",
        "signature_type": "Line",
        "target": {
            "file": "core/src/main/java/org/bouncycastle/pqc/crypto/frodo/FrodoMatrixGenerator.java"
        },
        "id": "CVE-2026-5598-f9f20a55",
        "deprecated": false
    }
]
vanir_signatures_modified 
"2026-07-22T03:57:26Z"
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-5598.json"