CVE-2026-86983
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-10-28
Modified: 2026-10-29
First seen: 2026-10-29
Status: pending_score
Description
A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3.
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| Apple | swift-crypto | 0 < 5.0.3 |
| Apple | swift-crypto | 0 < 5.0.3 |