Vulnerabilidades do Apple Swiftnio Ssl
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Apple Swiftnio Ssl: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:apple:swiftnio_ssl
CVE-2026-43820
Alta · 7.7
CWE-125 23/07/2026
Out-of-bounds Read em Apple Swiftnio Ssl
NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not all SANs are backed by ASN1_STRING, so accessing the buffer for such a type can lead to out-of-bounds memory access. This vulnerability is addressed in swift-nio-ssl version 2.37.2.