BaselineWatch
Desk

CVE-2026-43798

9.8 critical SSVC exploitation: none Analyzed

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 9.8 · appleNVD modified 2026-10-18 20:10

Affected (CPE criteria) 1

  • cpe:2.3:a:apple:swiftnio_ssh:*:*:*:*:*:swift:*:*

References 1