In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
Weakness
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
References
