CVE-2026-43820: Swift Nio Ssl San Type Confusion

Unconditionally accessing GENERAL_NAME union fields as ASN1_STRING without checking the GeneralName type causes type confusion and out-of-bounds memory reads for non-string SAN types (e.g., otherName).

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Swift
greprules fetch cve-2026-43820-swift-nio-ssl-san-type-confusion --engine opengrep

Description

Unconditionally accessing GENERAL_NAME union fields as ASN1_STRING without checking the GeneralName type causes type confusion and out-of-bounds memory reads for non-string SAN types (e.g., otherName).