CVE-2026-43820

The CVE concerns NIOSSLCertificate._subjectAlternativeNames in swift-nio-ssl where NIOSSL exposes a buffer that may be backed by ASN1_STRING, but not all SANs are. Accessing the buffer for non-ASN1_STRING SANs can cause out-of-bounds memory access. A fix is available in swift-nio-ssl v2.37.2. Aff...