CVE-2022-1642

The CVE describes a denial-of-service vulnerability in Swift corelibs-foundation’s JSON decoding: when decoding JSON with a numeric value that includes a fractional part, JSONDecoder could crash due to a type-mismatch between validation and casting. Affected component: swift-corelibs-foundation (...

CVE-2019-8790

CVE-2019-8790 involves incorrect management of file descriptors in URLSession within Apple Swift Foundation on Ubuntu, which could lead to inadvertent data disclosure. Connected sources confirm the issue affects Swift’s URLSession handling and was addressed by aligning the file descriptor logic t...

CVE-2018-4220

CVE-2018-4220 affects Apple Swift on Ubuntu 14.04 (Swift for Ubuntu). The root cause is that libraries are loaded with write and execute permissions, enabling arbitrary code execution in a privileged context. Affected software: Swift before 4.1.1 Security Update 2018-001 for Ubuntu 14.04. Impact ...