swift-crypto vulnerabilities

CVEs whose affected-version data names the swift-crypto package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-43823High· 7.5

2mo ago

When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit

When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests whe…

▾ Twilightapple · swift-cryptoEPSS 0.26%via NVD