Swift-crypto (Apple) - vulnerabilities (CVEs)

2 CVEs, 1 in the last 30 days, 82 known versions, newest CVE from 2026-10-28. Vendor: Apple.

CVEs of Swift-crypto

• CVE-2026-86983, 2026-10-28: A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This…
• CVE-2026-43823 - CVSS 7.5 (high), 2026-07-23: When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This…
• CVE-2026-28815 - CVSS 7.5 (high), 2026-04-03: A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash…