Approved changes feed: RSS · Atom

cpe:2.3:a:apple:swift-crypto:*:*:*:*:*:swift:*:*

part: a version: * update: *

VendorApple (c2b419d0-9f0f-51c1-88dc-2e204a98e1c7)
ProductSwift Crypto (bdfe262f-df97-5a99-8950-c5a3d5461bfa)
Edition*
Language*
Software edition*
Target softwareswift
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/apple/swift-crypto purl2cpe 2026-06-01 10:12:26.301002

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-28815 vulnerable 2026-06-08 07:55:15.716353 Details available
A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure depending on runtime protections. This issue is fixed in swift-crypto version 4.3.1.
Published: 2026-04-03T01:32:28.999Z
Updated: 2026-04-03T13:39:46.737Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.