Beveiligingsadvies

CVE-2026-28815

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-03 01:32:28

Laatst bijgewerkt 2026-04-03 13:39:46

Toegewezen door apple

CVSS-score 7.5

Status PUBLISHED

Beschrijving

A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure depending on runtime protections. This issue is fixed in swift-crypto version 4.3.1.

← Alle CVE's bekijken Bekijk op cve.org ↗