unscored
CVE-2026-86983
A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length.
Impact
A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Swift-Crypto | before 5.0.3 |