PT-2026-64002 · Apple · Swiftnio Ssl
CVE-2026-43820
·
Published
2026-07-23
·
Updated
2026-07-23
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
NIOSSLCertificate. subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1 STRING, but not all SANs are backed by ASN1 STRING, so accessing the buffer for such a type can lead to out-of-bounds memory access. This vulnerability is addressed in swift-nio-ssl version 2.37.2.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Swiftnio Ssl