CVE-2025-9092

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.

• CWE-400

• https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909092

Published

Aug 16, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-90861. A cookie is set using the `secure` keyword for `https://t…7.5
• CVE-2025-9087A vulnerability has been found in Tenda AC20 16.03.08.12. Th…9.8
• CVE-2025-9088A vulnerability was found in Tenda AC20 16.03.08.12. This vu…9.8
• CVE-2025-9089A vulnerability was determined in Tenda AC20 16.03.08.12. Th…9.8
• CVE-2025-9090A vulnerability was identified in Tenda AC20 16.03.08.12. Af…9.8
• CVE-2025-9091A security flaw has been discovered in Tenda AC20 16.03.08.1…7.8
• CVE-2025-9093A security vulnerability has been detected in BuzzFeed App 2…5.5
• CVE-2025-9094A vulnerability was detected in ThingsBoard 4.1. This vulner…4.3
• CVE-2025-9095A flaw has been found in ExpressGateway express-gateway up t…3.5
• CVE-2025-9096A vulnerability has been found in ExpressGateway express-gat…3.5
• CVE-2025-9097A vulnerability was found in Euro Information CIC banque et …5.3
• CVE-2025-9098A vulnerability was determined in Elseplus File Recovery App…5.3