CVE-2026-13505— Zeroisation of sensitive key material on garbage collection relies on finalization

Zeroisation of sensitive key material on garbage collection relies on finalization

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD and scrypt parameter classes was zeroised on garbage collection by overriding Object.finalize. Finalization runs at an unspecified time and in an unspecified order and is serviced by a single finalizer thread, so where objects carrying a finalizer are allocated faster than that thread retires them the pending-finalization queue grows without bound: disposal falls arbitrarily far behind, which can contribute to an OutOfMemoryError under load, and the key material those objects hold stays resident in the heap for as long as they are queued, defeating the purpose of the zeroisation. The behaviour was not a problem on Java 8 or Java 11; it is later JVMs, on which finalization has been deprecated and progressively de-emphasised, where it becomes one. Disposal of these classes now runs from a java.lang.ref.Cleaner registered in the multi-release jdk1.9 overlay, so on Java 9 and later it no longer depends on the finalizer being scheduled. Bouncy Castle for Java (bcprov) and Bouncy Castle for Java LTS are not affected, as neither implements the finalizer-based zeroisation scheme.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Amber

对已超过有效生命周期的资源丧失索引

Legion of the Bouncy Castle Inc BC-FJA 资源管理错误漏洞

Legion of the Bouncy Castle Inc BC-FJA是Legion of the Bouncy Castle Inc组织的一款Java加密库。 Legion of the Bouncy Castle Inc BC-FJA 1.0.2.7版本之前的1.0.X版本、2.0.2版本之前的2.0.X版本和2.1.3版本之前的2.1.X版本存在资源管理错误漏洞，该漏洞源于通过覆盖Object.finalize在垃圾回收时对AES和DESede引擎等持有的敏感密钥材料进行零化处理，由于fina

N/A

N/A