Threats affecting pkg:swift/swift-crypto

A vulnerability in swift-crypto allows a remote attacker to terminate a process by passing attacker-controlled input of unbounded length to the P-384 VOPRF API. This issue is fixed in version 5.0.3.

When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes provided. This vulnerability is addressed in swift-crypto version 4.5.1.

CVE-2026-28815 is a high-severity vulnerability in Apple macOS where a remote attacker can supply a short X-Wing HPKE encapsulated key, triggering an out-of-bounds read in the C decapsulation path. This can cause a crash or potentially disclose memory depending on runtime protections. The issue affects swift-crypto version 4.0.0 and is fixed in version 4.3.1. There are no known exploits in the wild at this time.