Remote Code Execution Vulnerability in Swift Crypto by Apple
CVE-2026-86983

Currently unrated

Key Information:

Vendor

Apple
Status
Swift-crypto
Vendor
CVE Published:
28 October 2026

What is CVE-2026-86983?

A vulnerability in Apple Swift Crypto allows a remote attacker to potentially terminate a process by supplying user-controlled input to the P-384 VOPRF API without properly bounding its length. This issue could lead to unexpected behavior or a denial of service. A patch has been implemented in swift-crypto version 5.0.3 to mitigate this risk.

Affected Version(s)

swift-crypto 0 < 5.0.3

References

https://github.com/apple/swift-crypto/security/advisories...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.