CVE-2026-15997
Low
Description
Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffers. This vulnerability is associated with program files https://github.Com/bcgit/bc-lts-java/blob/main/native_c/arm/sha/shake.C, https://github.Com/bcgit/bc-lts-java/blob/main/native_c/arm/sha/sha3.C. This issue affects BC-LTS: from 2.73.0 before 2.73.12.1. Issue is only applicable if application involved is accepting memoable SHA3 / SHAKE states from potentially untrusted sources.
SeverityLow
CVSS1.7
Exploit probability—
ProductBC-LTS
PublishedJul 16, 2026
First seenJul 16, 2026
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- Legion of the Bouncy Castle Inc. BC-LTS2.73.12.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Legion of the Bouncy Castle Inc. BC-LTS | 2.73.0 ≤ v < 2.73.12.1 | 2.73.12.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.