In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.
91579145-5d7b-4cc5-b925-a0262ff19630·CWE-789·Published 2026-08-03