CVE ID :CVE-2026-103603 Published : 2. Oktober 2026 08:17 | 1 Stunde, 3 Minuten ago Description :Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-103603 - Unbounded HSS public key level count allows huge array allocation during signature verification

VERWANDTEARTIKEL

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

CVE-2026-97637 - JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response

CVE-2026-63573 - Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap

CVE-2026-63574 - Unbounded allocation from OpenPGP signature and user attribute subpacket lengths

CVE-2026-63576 - URI name constraints checked against a mis-parsed host

CVE-2026-63577 - Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix