CVE-2026-43823
CVE-2026-43823: 1 tracked advisory record across Red Hat. Compare source-reported impact, fixes and remediation.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium6.2
Medium [CVE-2026-43823] Denial of Service due to double-free during RSA public key initialization
CVE-2026-43823Source published Source updated
When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit. This can lead to a crash on future memory allocations. This double-free manifests when BoringSSL cannot decode the public key from the bytes provided. This vulnerability is addressed in swift-crypto version 4.5.1. When an RSA (Rivest-Shamir-Adleman) public key is initialized from DER (Distinguished Encoding Rules) or PEM (Privacy-Enhanced Mail) formatted bytes, and an error occurs during the decoding process, a double-free vulnerability can be triggered. Red Hat severity: Moderate — CVSS 6.2 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-763. Affected Red Hat products: Red Hat Hardened Images. Red Hat fixing advisory…
- Affected products in this advisory
- Red Hat Hardened Images
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- nodejs24-main-24.18.0-0.5.hum1
- swift-lang-main-6.3.3-0.1.1.hum1
- RHSA-2026:45784
- RHSA-2026:45785
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.