CVE-2019-8849

—

CVSS 3.1

9.8 critical

EPSS

2%p82

Published

Dec 18, 2019 (Dec 18, 2019)

Modified

Jun 17, 2026

Description

The issue was addressed by signaling that an executable stack is not required. This issue is fixed in SwiftNIO SSL 2.4.1. A SwiftNIO application using TLS may be able to execute arbitrary code.

Vendors: apple
Products: swiftnio ssl
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.