CVE-2026-43820 | Apple swift up to 2.37.1 SubjectAlternativeNames NIOSSLCertificate._subjectAlternativeNames out-of-bounds

July 23, 2026 Yanac

A vulnerability described as critical has been identified in Apple swift up to 2.37.1. The impacted element is the function NIOSSLCertificate._subjectAlternativeNames of the component SubjectAlternativeNames. Such manipulation leads to out-of-bounds read.

This vulnerability is referenced as CVE-2026-43820. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More