01 Record

CVE-2026-43798

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This

UnratedPUBLISHEDCNA: apple

Base scoreUnratedNo CVSS vector published

View raw JSON CVE Program record

02 Description

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This

03 Metadata

Published: 2026-08-20 21:07Z1 DAY AGO
Last updated: 2026-08-20 21:08Z1 DAY AGO
Reserved: 2026-05-01
Assigning CNA: apple
Record state: PUBLISHED
Severity: Unrated: no CVSS score published
CVSS vector: Not published
Weaknesses: No CWE assigned
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: d7c774754c114149092304579c7697d4a5670ff73344db0f8a6e0a5ff86d9354

04 Affected products

VendorProductVersionsPlatforms

Appleswift-nio-ssh0 to < 0.14.1—

05 References

github.comhttps://github.com/apple/swift-nio-ssh/security/advisories/GHSA-998x-vgvp-xwpc