> CVE-2026-43823

« BACK_TO_HOME
PUBLISHED
2026-07-23 15:17
MODIFIED
2026-07-23 15:28
EPSS (Prob. Exploit)
0.43%
Top 63.9%
DATA SOURCES:
NVD 🔗 2026-07-23 RED HAT 🔗 2026-08-09 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes provided. This vulnerability is addressed in swift-crypto version 4.5.1.

> AFFECTED_PRODUCTS

Red Hat - Red Hat Hardened Images
Version: 24.18.0
Red Hat - Red Hat Hardened Images
Version: 6.3.3

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> HISTORIQUE DES MODIFICATIONS

Première apparition
23/07/2026 15:17
Source: NVD
📊 ENRICHISSEMENT 09/08/2026 05:00
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Moderate" }
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 26/07/2026 05:00
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 26/07/2026 05:00
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 2 months ago

> REFERENCES

https://github.com/apple/swift-crypto/security/advisories/GHSA-8q93-f6xh-4f6f
« BACK_TO_HOME