Search: CVE-2026-43823

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-43823Apple swift-crypto · When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is High7.5EPSS 0.4%2026-07-23CVE Database V5CVE-2026-43823 When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes provided. This vulnerability is addressed in swift-crypto version 4.5.1. EPSS 0.4%Vulnerability CWE-415	CVE Database V5	2026-07-23

Page 1 of 1 · 1 duplicate CVE record merged