{"cve":"CVE-2016-1000340","nvd":{"published":"2018-06-04T13:29:00.293","modified":"2026-06-17T00:38:51.270","status":"Modified","description":"In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.raw.Nat???). These classes are used by our custom elliptic curve implementations (org.bouncycastle.math.ec.custom.**), so there was the possibility of rare (in general usage) spurious calculations for elliptic curve scalar multiplications. Such errors would have been detected with high probability by the output validation for our scalar multipliers.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","score":7.5},"cwes":["CWE-19"],"references":["https://access.redhat.com/errata/RHSA-2018:2669","https://access.redhat.com/errata/RHSA-2018:2927","https://github.com/bcgit/bc-java/commit/790642084c4e0cadd47352054f868cc8397e2c00#diff-e5934feac8203ca0104ab291a3560a31","https://security.netapp.com/advisory/ntap-20181127-0004/","https://www.oracle.com/security-alerts/cpuoct2020.html"],"products":["bouncycastle:bc-java"],"source":"nvd","synced_at":"2026-10-19T20:50:40.212176939+00:00"},"epss":{"cve":"CVE-2016-1000340","score":0.02297,"percentile":0.83275,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-r97x-3g8f-gx3m","url":"https://osv.dev/vulnerability/GHSA-r97x-3g8f-gx3m","summary":"The Bouncy Castle JCE Provider carry a propagation bug","modified":"2025-09-12T20:11:40.283362Z","packages":[{"ecosystem":"Maven","name":"org.bouncycastle:bcprov-jdk14","purl":"pkg:maven/org.bouncycastle/bcprov-jdk14","ranges":[">=1.51 <1.56"],"fixed":["1.56"]},{"ecosystem":"Maven","name":"org.bouncycastle:bcprov-jdk15","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15","ranges":[">=1.51 <1.56"],"fixed":["1.56"]},{"ecosystem":"Maven","name":"org.bouncycastle:bcprov-jdk15on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on","ranges":[">=1.51 <1.56"],"fixed":["1.56"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}