CVE Intelligence

Apple Swift-crypto vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apple Swift-crypto: 1 record(s), with affected versions and fixes.
cpe:2.3:a:apple:swift-crypto

CVE-2026-28815 High · 7.5 CWE-125 Apr 3, 2026
Out-of-bounds Read in Apple Swift-crypto
A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure depending on runtime protections. This issue is fixed in swift-crypto version 4.3.1.