Denial Of Service (DoS)

2022-06-1716:28:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

38.7%

JSON

github.com/apple/swift-corelibs-foundation is vulnerable to denial of service. The vulnerability exists in unwrapFixedWidthInteger function in JSONDecoder.swift because the decoder uses mismatches accessors on NSNumber for numeric conversion which causes an application crash.

CPENameOperatorVersion
github.com/apple/swift-corelibs-foundationleswift-5.7-DEVELOPMENT-SNAPSHOT-2022-06-13-a
github.com/apple/swift-corelibs-foundationleswift-DEVELOPMENT-SNAPSHOT-2022-06-16-a
github.com/apple/swift-corelibs-foundationleswift-5.6.1-RELEASE
github.com/apple/swift-corelibs-foundationleswift-5.7-DEVELOPMENT-SNAPSHOT-2022-06-13-a
github.com/apple/swift-corelibs-foundationleswift-DEVELOPMENT-SNAPSHOT-2022-06-16-a
github.com/apple/swift-corelibs-foundationleswift-5.6.1-RELEASE

Name	Operator	Version
github.com/apple/swift-corelibs-foundation	le	swift-5.7-DEVELOPMENT-SNAPSHOT-2022-06-13-a
github.com/apple/swift-corelibs-foundation	le	swift-DEVELOPMENT-SNAPSHOT-2022-06-16-a
github.com/apple/swift-corelibs-foundation	le	swift-5.6.1-RELEASE
github.com/apple/swift-corelibs-foundation	le	swift-5.7-DEVELOPMENT-SNAPSHOT-2022-06-13-a
github.com/apple/swift-corelibs-foundation	le	swift-DEVELOPMENT-SNAPSHOT-2022-06-16-a
github.com/apple/swift-corelibs-foundation	le	swift-5.6.1-RELEASE