Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability, CVE-2025-14813, is located in the Bouncy Castle for Java library's implementation of the GOST 28147-2015 cipher in CTR mode. The root cause is an improper counter increment mechanism within the org.bouncycastle.crypto.modes.G3413CTRBlockCipher class. The analysis of the provided patches, specifically commit b42574345414e4b7c8051b16fa1fafe01c29871f, reveals the flaw. The original code in the generateCTR method (initially named generateCRT) only incremented the last byte of the counter array (CTR[CTR.length - 1]++). This means the counter would reset to its initial state after only 256 increments, causing the same keystream to be reused for subsequent blocks of data. Reusing a keystream in CTR mode is a critical cryptographic flaw, as it allows an attacker who can observe two ciphertexts to cancel out the keystream by XORing the ciphertexts, which in turn reveals the XOR of the corresponding plaintexts, breaking confidentiality. The function calculateByte is the method that processes the data and calls the vulnerable generateCTR function, making it a key indicator that would appear in a runtime profile when the vulnerability is triggered.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.bouncycastle:bcprov-jdk14 | maven | >= 1.59, <= 1.80.1 | |
| org.bouncycastle:bcprov-jdk15to18 | maven | >= 1.59, <= 1.80.1 | |
| org.bouncycastle:bcprov-jdk18on | maven | >= 1.59, <= 1.80.1 | 1.80.2 |
| org.bouncycastle:bcprov-debug-jdk14 | maven | >= 1.59, <= 1.80.1 | |
| org.bouncycastle:bcprov-debug-jdk15to18 | maven | >= 1.59, <= 1.80.1 | |
| org.bouncycastle:bcprov-debug-jdk18on | maven | >= 1.59, <= 1.80.1 | |
| org.bouncycastle:bcprov-ext-jdk14 | maven | >= 1.59, <= 1.78.1 | |
| org.bouncycastle:bcprov-ext-jdk15to18 | maven | >= 1.59, <= 1.78.1 | |
| org.bouncycastle:bcprov-ext-jdk18on | maven | >= 1.59, <= 1.78.1 | |
| org.bouncycastle:bcprov-ext-debug-jdk14 | maven | >= 1.59, <= 1.74 | |
| org.bouncycastle:bcprov-ext-debug-jdk15to18 | maven | >= 1.59, <= 1.77 | |
| org.bouncycastle:bcprov-ext-debug-jdk18on | maven | >= 1.59, <= 1.77 | |
| org.bouncycastle:bcprov-jdk14 | maven | = 1.81.0 | |
| org.bouncycastle:bcprov-jdk15to18 | maven | = 1.81.0 | |
| org.bouncycastle:bcprov-jdk18on | maven | = 1.81.0 | 1.81.1 |
| org.bouncycastle:bcprov-debug-jdk14 | maven | = 1.81.0 | |
| org.bouncycastle:bcprov-debug-jdk15to18 | maven | = 1.81.0 | |
| org.bouncycastle:bcprov-debug-jdk18on | maven | = 1.81.0 | |
| org.bouncycastle:bcprov-jdk14 | maven | >= 1.82, <= 1.83 | 1.84 |
| org.bouncycastle:bcprov-jdk15to18 | maven | >= 1.82, <= 1.83 | 1.84 |
| org.bouncycastle:bcprov-jdk18on | maven | >= 1.82, <= 1.83 | 1.84 |
| org.bouncycastle:bcprov-debug-jdk14 | maven | >= 1.82, <= 1.83 | 1.84 |
| org.bouncycastle:bcprov-debug-jdk15to18 | maven | >= 1.82, <= 1.83 | 1.84 |
| org.bouncycastle:bcprov-debug-jdk18on | maven | >= 1.82, <= 1.83 | 1.84 |
