Product:
swift-crypto
Summary
A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path. This could potentially cause a crash or memory disclosure depending on runtime protections. The issue has been addressed in swift-crypto version 4.3.1.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28815 |
Exploitation
To exploit this vulnerability, an attacker needs to send a specially crafted X-Wing HPKE encapsulated key to the target system. This key can trigger an out-of-bounds read in the C decapsulation path, leading to potential crashes or memory disclosures. The attack can be executed over the network without requiring any user interaction or special privileges.
Affected Products
- swift-crypto: A library for cryptographic operations that is vulnerable to out-of-bounds reads when processing specific encapsulated keys.
Mitigation
To mitigate this vulnerability, users should update to swift-crypto version 4.3.1 or later. This update addresses the out-of-bounds read issue and enhances the overall security of the library.