CVE-2026-43823

A double-free vulnerability exists in swift-crypto (specifically within the swiftlang package) when initializing an RSA public key from DER or PEM formatted bytes. If BoringSSL fails to decode the provided bytes, the EVP_PKEY* is freed twice—once in the catch block and again during deinitializati...