The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.bouncycastle:bcprov-jdk14(Maven) | 1.63 | 1.64 | N/A |
CVSS Metrics
