https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:00:49 +0000 https://cve.radiocsirt.org/vuln/cve-2025-0343 <p><strong>Affected:</strong> Swift Project Swift ASN1</p> <p>Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constraint isn&#39;t met.</p> <p>Importantly, these constraints are actually required to be true in DER, but that correctness wasn&#39;t enforced on the early node parser side so it was incorrect to rely on it later on in decoding, which is what the library did.</p> <p>These crashes can be triggered when parsing any DER/BER format object. There is no memory-safety issue here: the crash is a graceful one from the Swift runtime. The impact of this is that it can be used as a denial-of-service vector when parsing BER/DER data from unknown sources, e.g. when parsing TLS certificates.</p> <p><strong>Affected:</strong> Swift Project Swift ASN1</p> <p>Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constraint isn&#39;t met.</p> <p>Importantly, these constraints are actually required to be true in DER, but that correctness wasn&#39;t enforced on the early node parser side so it was incorrect to rely on it later on in decoding, which is what the library did.</p> <p>These crashes can be triggered when parsing any DER/BER format object. There is no memory-safety issue here: the crash is a graceful one from the Swift runtime. The impact of this is that it can be used as a denial-of-service vector when parsing BER/DER data from unknown sources, e.g. when parsing TLS certificates.</p> https://cve.radiocsirt.org/vuln/cve-2025-0343