Vulnerability	Vulnerable Version
H Uncontrolled Recursion Affected versions of this package are vulnerable to Uncontrolled Recursion in the `OERInputStream.parse(Element)` method, which processes the SEQ, CHOICE, and Supplier children of an IEEE 1609.2 structure recursively without enforcing a depth limit. An attacker can crash the parsing thread or the JVM with a `StackOverflowError` by supplying a roughly 2 to 4 KB IEEE 1609.2 message containing hundreds of nested `signedData` payloads to the `ETSISignedData(byte[])` or `ETSIEncryptedData(byte[])` entry points, which parse untrusted input before signature verification. Exploitation reaches the recursion pre-verification because the schema's self-referential `mayRecurse` cycle (`Ieee1609Dot2Data` back to itself) is only validated in test tooling, not at runtime, so it requires only that the application pass untrusted IEEE 1609.2 data to those entry points. How to fix Uncontrolled Recursion? Upgrade `org.bouncycastle:bcutil-jdk18on` to version 1.85 or higher.	[,1.85)

Uncontrolled Recursion

Affected versions of this package are vulnerable to Uncontrolled Recursion in the OERInputStream.parse(Element) method, which processes the SEQ, CHOICE, and Supplier children of an IEEE 1609.2 structure recursively without enforcing a depth limit. An attacker can crash the parsing thread or the JVM with a StackOverflowError by supplying a roughly 2 to 4 KB IEEE 1609.2 message containing hundreds of nested signedData payloads to the ETSISignedData(byte[]) or ETSIEncryptedData(byte[]) entry points, which parse untrusted input before signature verification. Exploitation reaches the recursion pre-verification because the schema's self-referential mayRecurse cycle (Ieee1609Dot2Data back to itself) is only validated in test tooling, not at runtime, so it requires only that the application pass untrusted IEEE 1609.2 data to those entry points.

How to fix Uncontrolled Recursion?

Upgrade org.bouncycastle:bcutil-jdk18on to version 1.85 or higher.

[,1.85)

Go back to all versions of this package