cbcvebase.

Apple Swift-Crypto vulnerabilities

1 known vulnerability affecting apple/swift-crypto.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2026-28815P3HIGHCVSS 7.5≥ 4.0.0, < 4.3.12026-04-03
CVE-2026-28815 [HIGH] CWE-125 CVE-2026-28815: A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure depending on runtime protections. This issue is fixed in swift-crypto version 4.3.1.
ghsanvdosv
Apple Swift-Crypto vulnerabilities | cvebase