Important: swiftlang

Issue Overview: When initializing an RSA public key from DER or PEM bytes throws an error, the EVPPKEY is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from...

CVE-2026-43823: Double Free

When initializing an RSA public key from DER or PEM bytes throws an error, the EVPPKEY is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes...

The vulnerability of the EVP_PKEY_public_check() function in the OpenSSL library allows a attacker to trigger a Denial-of-Service Attack.

The vulnerability of the EVPPKEYpubliccheck function in the OpenSSL library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to trigger a Denial-of-Service attack...

libssh2:ssh2_client_fuzzer: Crash in libcrypto.soNUMBER

Detailed Report: https://oss-fuzz.com/testcase?key=5401784546361344 Project: libssh2 Fuzzing Engine: honggfuzz Fuzz Target: ssh2clientfuzzer Job Type: honggfuzzasanlibssh2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x604000260000 Crash State: libcrypto.soNUMBER...