CVE-2026-28815

The CVE affects Swift’s crypto stack via an out-of-bounds read in the C decapsulation path when processing a short X-Wing HPKE encapsulated key. This can cause a crash or a memory disclosure depending on runtime protections. Affected/impacted component is the swift-crypto implementation, with a f...

CVE-2026-28815

A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure depending on runtime protections. This issue is fixed in swift-crypto version 4.3.1...