PT-2026-64002 · Apple · Swiftnio Ssl

CVE-2026-43820 · Publicado 2026-07-23 · Atualizado 2026-07-23

Mitre

NIOSSLCertificate. subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1 STRING, but not all SANs are backed by ASN1 STRING, so accessing the buffer for such a type can lead to out-of-bounds memory access. This vulnerability is addressed in swift-nio-ssl version 2.37.2.

Identificadores relacionados

CVE-2026-43820

Produtos afetados

Swiftnio Ssl

Referências · 2

• https://github.com/apple/swift-nio-ssl/security/advisories/GHSA-xfxg-9975-pc2j · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-43820 · Nota de Segurança