CVE-2026-63567

Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc.

Bc-Csharp

Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has captured an IES or ECIES ciphertext, and who can submit modified ciphertexts for decryption under the same key pair, to recover its plaintext via a CBC padding-oracle attack, because in block-cipher mode the engine decrypts the ciphertext and removes its padding before verifying the MAC. A padding failure is therefore reported with a…

2. Okt 2026

Ausgewertete Quellen

• NVD
  CVE-2026-63567
• GitHub
  https://github.com/bcgit/bc-csharp/wiki/CVE-2026-63567