Unrated severityNVD Advisory· Published Oct 28, 2026

CVE-2026-86983

Description

A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3.

Patches

Vulnerability mechanics

References

github.com/apple/swift-crypto/security/advisories/GHSA-jwv7-rv4f-rff2nvd

News mentions

No linked articles in our index yet.