Critical severity9.8NVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026

CVE-2019-8849

Description

The issue was addressed by signaling that an executable stack is not required. This issue is fixed in SwiftNIO SSL 2.4.1. A SwiftNIO application using TLS may be able to execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/apple/swift-nio-sslSwiftURL	>= 2.0.0, < 2.4.1	2.4.1

Affected products

ghsa-coords
pkg:swift/github.com/apple/swift-nio-ssl
Range: >= 2.0.0, < 2.4.1
Apple/Swift-Ubuntuv5
Range: unspecified

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-frg3-gpcx-968fghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-8849ghsaADVISORY
support.apple.com/HT210772nvdVendor AdvisoryWEB
github.com/apple/swift-nio-ssl/commit/109faef770994e71b6bafcc015e2e96b88a4af8cghsaWEB
github.com/apple/swift-nio-ssl/releases/tag/2.4.1ghsaWEB
security.snyk.io/vuln/SNYK-COCOAPODS-SWIFTNIOSSL-8492737ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000