CVE-2026-13586: PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)

August 3, 2026 (updated September 16, 2026)

Affects Bouncy Castle for Java LTS before 2.73.12. PKCS12KeyStoreSpi and PKCS12PBMAC1KeyStoreSpi derived integrity-MAC and bag-decryption keys using iteration counts taken from the keystore file with no ceiling. A file of a few hundred bytes declaring a count near 2^31 occupies the loading thread in key derivation before any password or integrity check can fail. Counts are now validated and capped at five million by default, adjustable through org.bouncycastle.pkcs12.max_it_count.

References

github.com/bcgit/bc-java/commit/75d60dfb4ca72bea6da96234138bc9b1556ef5b0
github.com/bcgit/bc-java/commit/fa59cc23502f73def89d94374540cc92af647b96
github.com/bcgit/bc-java/wiki/CVE-2026-13586
nvd.nist.gov/vuln/detail/CVE-2026-13586

Code Behaviors & Features

Detect and mitigate CVE-2026-13586 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →