Apple Swift-crypto
2 CVEs affecting Apple Swift-crypto. Latest disclosed: 2026-07-23. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-43823 | High | 7.5 | 2026-07-23 | When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This ca… |
CVE-2026-28815 | High | 7.5 | 2026-04-03 | A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or… |