Tagged “swift”
CVEs tagged swift, newest first.
8 CVEsRSS
CVE-2026-61695High· 7.5PoCWire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java
Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0.0-alpha04, Wire's Swift runtime ProtoReader.skipGroup(expectedEndTag:unknownFieldsWriter:) accepts a negative length for a LENGTH_DELIMI…
CVE-2026-64785Medium· 5.3swift-nio-http2: Missing CR/LF/NUL validation in header values
swift-nio-http2: Missing CR/LF/NUL validation in header values
CVE-2026-28970MediumSwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator
SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator
CVE-2026-43671HighSwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow
SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow
CVE-2026-28980HighSwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS
SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS
CVE-2026-28975MediumNIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length
NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length
CVE-2026-28898LowSwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec
SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec
CVE-2024-27529High· 8.4wasm3 uncontrolled memory allocation vulnerability
wasm3 uncontrolled memory allocation vulnerability