CVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned data
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2026-12817?
CVE-2026-12817 is a vulnerability in Bouncy Castle for Java that allows OpenPGP AEAD decryption to skip the final tag on chunk-aligned data.
What is the severity of CVE-2026-12817?
The severity of CVE-2026-12817 is rated high with a score of 8.7 on the CVSS scale.
How do I fix CVE-2026-12817?
To fix CVE-2026-12817, update Bouncy Castle for Java to version 1.85 or later, and ensure you are using the latest LTS or FIPS versions.
Which versions of Bouncy Castle are affected by CVE-2026-12817?
Affected versions of Bouncy Castle include all versions before 1.85, Bouncy Castle LTS before 2.73.12, and BC-FJA before specified versions in the 1.0.X, 2.0.X, and 2.1.X series.
What type of data does CVE-2026-12817 impact?
CVE-2026-12817 impacts chunk-aligned data during OpenPGP AEAD decryption operations in Bouncy Castle.