CVE-2026-43820

Name of the Vulnerable Software and Affected Versions swift-nio-ssl versions prior to 2.37.2

Description NIOSSLCertificate. subjectAlternativeNames provides access to the raw bytes for a certificate's Subject Alternative Names (SANs). The system provides access to a buffer assumed to be backed by an ASN1 STRING; however, because not all SANs use this structure, accessing the buffer for unsupported types can result in out-of-bounds memory access.

Recommendations Update swift-nio-ssl to version 2.37.2.