CVE-2020-4068

2020-06-2216:15:11

Google

osv.dev

7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

JSON

In APNSwift 1.0.0, calling APNSwiftSigner.sign(digest:) is likely to result in a heap buffer overflow. This has been fixed in 1.0.1.

CPENameOperatorVersion
apnswifteq0.1.4
apnswifteq0.1.0
apnswifteq1.0.0-alpha.1
apnswifteq0.1.3
apnswifteq1.0.0
apnswifteq1.0.0-alpha.2
apnswifteq0.1.2
apnswifteq0.1.1

Name	Operator	Version
apnswift	eq	0.1.4
apnswift	eq	0.1.0
apnswift	eq	1.0.0-alpha.1
apnswift	eq	0.1.3
apnswift	eq	1.0.0
apnswift	eq	1.0.0-alpha.2
apnswift	eq	0.1.2
apnswift	eq	0.1.1

References

github.com/kylebrowning/APNSwift/commit/97fa7f69dcdd89168fff84e0ba8f999881ee3d3f

github.com/kylebrowning/APNSwift/issues/31

github.com/kylebrowning/APNSwift/pull/32

github.com/kylebrowning/APNSwift/security/advisories/GHSA-qh2w-vjxg-mjcg