CVE-2025-14813

CVE-2025-14813 is a cryptographic algorithm vulnerability in Bouncy Castle's BC-JAVA library affecting versions 1.59 through 1.83, wherein the GOSTCTR implementation fails to correctly process data blocks beyond 255 blocks. The vulnerability resides in the G3413CTRBlockCipher program file and represents a broken or risky cryptographic implementation rather than a complete bypass. The vulnerability carries a FAUCET Risk Score of 53.0/100, indicating moderate concern, though a CVSS score has not been assigned. As a cryptographic weakness affecting core encryption functionality, successful exploitation could potentially lead to plaintext recovery or data integrity compromise for applications relying on GOSTCTR encryption for sensitive operations. This vulnerability currently shows no signs of active exploitation in the wild, with no available exploit code in public repositories or known integration into exploit kits. The vulnerability maintains an inactive status on exploitation tracking lists, and the extremely low EPSS score of 0.00004 suggests minimal real-world attack probability at this time. Organizations should prioritize patching to BC-JAVA version 1.84 or later to remediate the cryptographic deficiency.