VulnSocial

CVE-2026-43820Disclosure(apple / swiftnio_ssl)

LOWCVSS 7.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not all SANs are backed by ASN1_STRING, so accessing the buffer for such a type can lead to out-of-bounds memory access. This vulnerability is addressed in swift-nio-ssl version 2.37.2.

apple CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • swiftnio_ssl

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
apple
Products
swiftnio_ssl

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-23: 2Technical Details · 2026-07-23: 207-23
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-43820 NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRI… https://www.cve.org/CVERecord?id=CVE-2026-43820 ----- Traducción: CVE-2026-43820 NIO… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑43820, describing its technical details but providing no evidence of exploitation, PoC, or patch.

    0000030
    94 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-43820 NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRI… https://www.cve.org/CVERecord?id=CVE-2026-43820

    Post summary

    The post discloses CVE‑2026‑43820 as a flaw exposing raw bytes of certificate SANs in NIOSSLCertificate._subjectAlternativeNames; no exploit, patch, or active exploitation details are included.

    00000656
    57.9K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appappleswiftnio_ssl---

Explore more

Back to dashboardapple CVEsswiftnio_ssl vulnerabilities