Broken GOSTCTR Algorithm in Bouncy Castle BC-Java bcprov <1.84
CVE-2025-14813 Published on April 15, 2026

GOSTCTR implementation unable to process more than 255 blocks correctly
: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2025-14813 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

NONE

Availability Impact:

NONE

Weakness Type

Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information. The use of a non-standard algorithm is dangerous because a determined attacker may be able to break the algorithm and compromise whatever data has been protected. Well-known techniques may exist to break the algorithm.

Products Associated with CVE-2025-14813

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2025-14813 are published in these products:

Bouncycastle Bc Java

Red Hat Jboss Enterprise Application Platform

Red Hat Amq Broker

Red Hat Apache Camel Quarkus

Red Hat Openshift Ai

Red Hat Openshift Devspaces

Red Hat Apache Camel Spring Boot

Red Hat Quarkus

Red Hat Ocp Tools

Red Hat Amq Clients

Red Hat Camel Quarkus

Red Hat Apicurio Registry

Red Hat Debezium

Red Hat Build Keycloak

Red Hat Enterprise Linux (RHEL)

Red Hat Jboss Fuse

Red Hat Jboss Enterprise Bpms Platform

Red Hat Single Sign On

Red Hat Amq Streams

Red Hat Cryostat

Red Hat Jboss Data Grid

Red Hat Jbosseapxp

Red Hat Satellite

Red Hat Jboss Enterprise Application Platform Els

Affected Versions

Legion of the Bouncy Castle Inc. BC-JAVA:

Version 1.59 and below 1.80.2 is affected.
Version 1.81 and below 1.81.1 is affected.
Version 1.82 and below 1.84 is affected.

Red Hat AMQ Broker 7.12.7: Red Hat AMQ Broker 7.13.5: Red Hat AMQ Broker 7.14.1: Red Hat Build of Apache Camel 4.14 for Quarkus 3.27: Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14:

Version debug-jdk15on and below * is unaffected.

Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14: Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14: Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14: Red Hat build of Quarkus 3.20.6.SP1: Red Hat build of Quarkus 3.27.3.SP1: Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.16.0-22.redhat_00057.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.3.14-11.SP11_redhat_00001.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:1.5.26-2.Final_redhat_00001.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.18.8-1.redhat_00003.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:5.0.31-3.SP2_redhat_00001.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:1.10.0-46.Final_redhat_00044.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:4.1.135-1.Final_redhat_00001.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:4.1.135-1.Final_redhat_00001.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.5.5-30.SP12_redhat_00020.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.5.5-24.SP12_redhat_00016.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:2.2.40-2.SP3_redhat_00001.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7:

Version 0:7.4.25-2.GA_redhat_00001.1.el7eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.16.0-22.redhat_00057.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.3.14-11.SP11_redhat_00001.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:1.5.26-2.Final_redhat_00001.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.18.8-1.redhat_00003.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.18.8-1.redhat_00003.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.18.8-1.redhat_00003.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.18.8-1.redhat_00003.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.18.8-1.redhat_00003.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.18.8-1.redhat_00003.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:5.0.31-3.SP2_redhat_00001.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:1.10.0-46.Final_redhat_00044.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:4.1.135-1.Final_redhat_00001.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:4.1.135-1.Final_redhat_00001.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.5.5-30.SP12_redhat_00020.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.5.5-24.SP12_redhat_00016.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:2.2.40-1.SP3_redhat_00001.1.el8eap and below * is unaffected.

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8:

Version 0:7.4.25-2.GA_redhat_00001.1.el8eap and below * is unaffected.