-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/apple/swift-asn1 | swift | <= 1.3.0 | 1.3.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from improper handling of constructed vs. primitive encodings in DER/BER parsing. The affected functions all contained guard statements checking for .primitive content, followed by preconditionFailure crashes when the check failed. This violated DER's actual rules (which allow BER's flexibility) and created denial-of-service risks. The commit diff shows these preconditionFailure calls were replaced with error throws, confirming these were the vulnerable points. The pattern repeats across multiple ASN1 type initializers and the DER parser itself, all sharing the same flawed assumption about early parser validation.
SwiftSwiftKEV Misses 88% of Exploited CVEs- Get the report