{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "cpe": "cpe:2.3:a:apple:swiftnio_ssl:*:*:*:*:*:*:*:*",
            "extracted_events": [
              {
                "introduced": "2.18.0"
              },
              {
                "fixed": "2.37.2"
              }
            ],
            "source": "CPE_RANGE"
          },
          "events": [
            {
              "introduced": "b5260a31c2a72a89fa684f5efb3054d8725a2316"
            },
            {
              "fixed": "d930168b86f46ca51a4bc09c5ca45c1833db8067"
            }
          ],
          "repo": "https://github.com/apple/swift-nio-ssl",
          "type": "GIT"
        }
      ]
    }
  ],
  "aliases": [
    "GHSA-xfxg-9975-pc2j"
  ],
  "database_specific": {},
  "details": "NIOSSLCertificate._subjectAlternativeNames provides access to the raw bytes for a cert's SANs. NIOSSL provides access to a buffer assumed to be backed by an ASN1_STRING, but not all SANs are backed by ASN1_STRING, so accessing the buffer for such a type can lead to out-of-bounds memory access. This vulnerability is addressed in swift-nio-ssl version 2.37.2.",
  "id": "CVE-2026-43820",
  "modified": "2026-09-06T03:30:49.224187393Z",
  "published": "2026-07-23T15:17:05.503Z",
  "references": [
    {
      "type": "EVIDENCE",
      "url": "https://github.com/apple/swift-nio-ssl/security/advisories/GHSA-xfxg-9975-pc2j"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}