CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-43823

When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes provided. This vulnerability is addressed in swift-crypto version 4.5.1.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 17.0%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2026-43823

Apple » Swift-Crypto » Version: 3.10.0

cpe:2.3:a:apple:swift-crypto:3.10.0
Apple » Swift-Crypto » Version: 3.10.1

cpe:2.3:a:apple:swift-crypto:3.10.1
Apple » Swift-Crypto » Version: 3.10.2

cpe:2.3:a:apple:swift-crypto:3.10.2
Apple » Swift-Crypto » Version: 3.11.0

cpe:2.3:a:apple:swift-crypto:3.11.0
Apple » Swift-Crypto » Version: 3.11.1

cpe:2.3:a:apple:swift-crypto:3.11.1
Apple » Swift-Crypto » Version: 3.11.2

cpe:2.3:a:apple:swift-crypto:3.11.2
Apple » Swift-Crypto » Version: 3.12.0

cpe:2.3:a:apple:swift-crypto:3.12.0
Apple » Swift-Crypto » Version: 3.12.1

cpe:2.3:a:apple:swift-crypto:3.12.1
Apple » Swift-Crypto » Version: 3.12.2

cpe:2.3:a:apple:swift-crypto:3.12.2
Apple » Swift-Crypto » Version: 3.12.3

cpe:2.3:a:apple:swift-crypto:3.12.3
Apple » Swift-Crypto » Version: 3.12.4

cpe:2.3:a:apple:swift-crypto:3.12.4
Apple » Swift-Crypto » Version: 3.12.5

cpe:2.3:a:apple:swift-crypto:3.12.5
Apple » Swift-Crypto » Version: 3.13.0

cpe:2.3:a:apple:swift-crypto:3.13.0
Apple » Swift-Crypto » Version: 3.13.1

cpe:2.3:a:apple:swift-crypto:3.13.1
Apple » Swift-Crypto » Version: 3.13.2

cpe:2.3:a:apple:swift-crypto:3.13.2
Apple » Swift-Crypto » Version: 3.13.3

cpe:2.3:a:apple:swift-crypto:3.13.3
Apple » Swift-Crypto » Version: 3.14.0

cpe:2.3:a:apple:swift-crypto:3.14.0
Apple » Swift-Crypto » Version: 3.15.0

cpe:2.3:a:apple:swift-crypto:3.15.0
Apple » Swift-Crypto » Version: 3.15.1

cpe:2.3:a:apple:swift-crypto:3.15.1
Apple » Swift-Crypto » Version: 3.2.0

cpe:2.3:a:apple:swift-crypto:3.2.0
Apple » Swift-Crypto » Version: 3.3.0

cpe:2.3:a:apple:swift-crypto:3.3.0
Apple » Swift-Crypto » Version: 3.4.0

cpe:2.3:a:apple:swift-crypto:3.4.0
Apple » Swift-Crypto » Version: 3.5.0

cpe:2.3:a:apple:swift-crypto:3.5.0
Apple » Swift-Crypto » Version: 3.5.1

cpe:2.3:a:apple:swift-crypto:3.5.1
Apple » Swift-Crypto » Version: 3.5.2

cpe:2.3:a:apple:swift-crypto:3.5.2
Apple » Swift-Crypto » Version: 3.6.0

cpe:2.3:a:apple:swift-crypto:3.6.0
Apple » Swift-Crypto » Version: 3.6.1

cpe:2.3:a:apple:swift-crypto:3.6.1
Apple » Swift-Crypto » Version: 3.7.0

cpe:2.3:a:apple:swift-crypto:3.7.0
Apple » Swift-Crypto » Version: 3.7.1

cpe:2.3:a:apple:swift-crypto:3.7.1
Apple » Swift-Crypto » Version: 3.8.0

cpe:2.3:a:apple:swift-crypto:3.8.0
Apple » Swift-Crypto » Version: 3.8.1

cpe:2.3:a:apple:swift-crypto:3.8.1
Apple » Swift-Crypto » Version: 3.9.0

cpe:2.3:a:apple:swift-crypto:3.9.0
Apple » Swift-Crypto » Version: 3.9.1

cpe:2.3:a:apple:swift-crypto:3.9.1
Apple » Swift-Crypto » Version: 4.0.0

cpe:2.3:a:apple:swift-crypto:4.0.0
Apple » Swift-Crypto » Version: 4.1.0

cpe:2.3:a:apple:swift-crypto:4.1.0
Apple » Swift-Crypto » Version: 4.2.0

cpe:2.3:a:apple:swift-crypto:4.2.0
Apple » Swift-Crypto » Version: 4.3.0

cpe:2.3:a:apple:swift-crypto:4.3.0
Apple » Swift-Crypto » Version: 4.3.1

cpe:2.3:a:apple:swift-crypto:4.3.1
Apple » Swift-Crypto » Version: 4.5.0

cpe:2.3:a:apple:swift-crypto:4.5.0
Apple » Swift-Crypto » Version: 4.5.1

cpe:2.3:a:apple:swift-crypto:4.5.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-43823

Products

Pricing

Contact Us