The Bouncy Castle BC-JAVA library is vulnerable to a high-severity memory allocation flaw that permits remote denial of service attacks against affected applications.

This vulnerability is categorized as CWE-789: Memory Allocation with Excessive Size Value. It allows an unauthenticated remote attacker to trigger excessive memory allocation, leading to application instability or service exhaustion.

The exploitation of this vulnerability results in high impact to availability, as it can cause the host application to crash or become unresponsive. Given the widespread use of Bouncy Castle in cryptographic operations, this could lead to significant operational disruption and system downtime. The CVSS score of 8.7 reflects the high severity of this potential disruption to business continuity.

Immediate Action: Update the Bouncy Castle BC-JAVA library to version 1.85 or later immediately to resolve the memory allocation issue.

Proactive Monitoring: Monitor application server logs for frequent "OutOfMemoryError" exceptions or sudden, unexplained spikes in heap usage.

Compensating Controls: Implement resource quotas and request size limits at the application gateway or load balancer level to prevent malformed requests from reaching the vulnerable library.

Public Exploit Available: No

Organizations utilizing the Bouncy Castle library for Java must prioritize updating to version 1.85. The high CVSS score highlights the criticality of this update to prevent potential denial of service attacks against core infrastructure.