CVE-2026-15997: BC-LTS 2.73.0 to before 2.73.12.1

Affected technology

BC-LTS · 2.73.0 to before 2.73.12.1
Legion of the Bouncy Castle Inc.

Component: Not specified by the source
File: https://github.com/bcgit/bc-lts-java/blob/main/native_c/arm/sha/shake.c, https://github.com/bcgit/bc-lts-java/blob/main/native_c/arm/sha/sha3.c

Attack conditions (Source advisory, CVSS 4.0): Local · No privileges required · Active user interaction

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 1.7/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.