CVE-2024-30172: Bouncycastle Legion-Of-The-Bouncy-Castle-Java-Crytography-API

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.

Affected products

• Bouncycastle Legion-Of-The-Bouncy-Castle-Java-Crytography-API: before 1.78 (fixed in 1.78)

Published 2024-05-14. Last modified 2026-06-17.