VDB
BDU%3A2019-01880
BDU%3A2019-01880
PUBLISHED
CVSS 7.5 HIGH
Уязвимость средства криптографической защиты Bouncy Castle, связанная с восстановлением в памяти недостоверной структуры данных, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Legion of the Bouncy Castle Inc., Google Inc | Bouncy Castle, Android Studio |
Timeline
- May 31, 2019 CVE Published
- Feb 10, 2026 CVE Updated
References
- https://github.com/bcgit/bc-java/commit/4092ede58da51af9a21e4825fbad0d9a3ef5a223#diff-2c06e2edef41db889ee14899e12bd574 url
- https://github.com/bcgit/bc-java/commit/cd98322b171b15b3f88c5ec871175147893c31e6#diff-148a6c098af0199192d6aede960f45dc url
- https://security.netapp.com/advisory/ntap-20190204-0003/ url
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html url
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html url