CVE-2026-86983: vulnerability facts

CVE-2026-86983

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3.

EPSS 0.2% · Fix available

Published: 2026-10-28T23:01:59.598Z
Updated: 2026-10-28T23:02:44.171Z

Affected products and versions

swift-crypto
Versions
- ≥ 0, < 5.0.3: Affected (custom)
Update to 5.0.3

Original sources

https://github.com/apple/swift-crypto/security/advisories/GHSA-jwv7-rv4f-rff2
https://nvd.nist.gov/vuln/detail/CVE-2026-86983

Check your server →