{"id":"CVE-2026-86983","published":"2026-10-28T23:17:11.260","lastModified":"2026-10-28T23:17:11.260","description":"A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/apple/swift-crypto/security/advisories/GHSA-jwv7-rv4f-rff2","tags":[]}],"exploitRefs":[{"url":"https://github.com/apple/swift-crypto/security/advisories/GHSA-jwv7-rv4f-rff2","tags":[]}],"hasPoc":true,"ai":null}