PatchTheCVECVE-2022-1642: A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially
CVE-2022-1642 is a high-severity flaw (CVSS 7.5) affecting swift, swift. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability is caused by the interaction between a deserialization mechanism offered by the Swift standard library, the Codable protocol; and the JSONDecoder class offered by swift-corelibs-foundation, which can deserialize types that adopt the Codable protocol
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-1642?
swift: upgrade to 5.6.2; swift: upgrade to 5.6.2. Exact commands for each OS are on this page.
Is CVE-2022-1642 being exploited?
CVE-2022-1642 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-1642 affect?
CVE-2022-1642 affects swift, swift. Severity is high (CVSS 7.5). A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability is caused by the interaction between a d
How urgent is CVE-2022-1642?
Priority 44/100. High severity; Remotely exploitable, no login, no user action
Software pages
Related CVEs
- CVE-2026-50221 MEDIUM 5.4 UPGRADE In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Con
- CVE-2026-49017 MEDIUM 6.5 UPGRADE In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a trunca
- CVE-2023-26154 MEDIUM 5.9 UPGRADE UPGRADE Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the pa
- CVE-2022-47950 MEDIUM 6.5 UPGRADE MITIGATE An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0
- CVE-2022-32389 HIGH 7.5 DOWNGRADE Isode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry Editor