CVE-2025-8885

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdenti... https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.Java . This issue affects BC Java: from 1.0 through 1.77; BC-FJA: from 1.0.0 through 1.0.2.5, from 2.0.0 through 2.0.1.

• CWE-770

• https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%908885

Published

Aug 12, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8878The The Paid Membership Plugin, Ecommerce, User Registration…6.5
• CVE-2025-8879Heap buffer overflow in libaom in Google Chrome prior to 139…8.8
• CVE-2025-8880Race in V8 in Google Chrome prior to 139.0.7258.127 allowed …8.8
• CVE-2025-8881Inappropriate implementation in File Picker in Google Chrome…6.5
• CVE-2025-8882Use after free in Aura in Google Chrome prior to 139.0.7258.…8.8
• CVE-2025-8884Authorization Bypass Through User-Controlled Key vulnerabili…5.5
• CVE-2025-8886Incorrect Permission Assignment for Critical Resource, Expos…6.7
• CVE-2025-8887Authorization Bypass Through User-Controlled Key, Missing Au…6.1
• CVE-2025-8889The Compress & Upload WordPress plugin before 1.0.5 does not…3.8
• CVE-2025-8890Firmware in SDMC NE6037 routers prior to version 7.1.12.2.44…9.3
• CVE-2025-8891The OceanWP theme for WordPress is vulnerable to Cross-Site …4.3
• CVE-2025-8892A maliciously crafted PRT file, when parsed through certain …7.8