CVE-2026-64773

An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wait can be stretched. This vulnerability is addressed in container version 1.2.0.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/apple/container/security/advisories/GHSA-wg28-286f-56v6	Patch Vendor Advisory Mitigation

Configurations

Configuration 1 (hide)

cpe:2.3:a:apple:container:*:*:*:*:*:swift:*:*

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Un atacante que puede alcanzar el puerto TCP publicado de un contenedor podría ser capaz de forzar al proceso de reenvío del host a almacenar en búfer una cantidad ilimitada de los datos de ese cliente en memoria, durante el tiempo que tarde en completarse la conexión del contenedor de backend - sin límite en cuánto se acumula o cuánto se puede prolongar la espera. Esta vulnerabilidad se aborda en la versión 1.2.0 del contenedor.

Information

Published : 2026-08-20 22:17

Updated : 2026-10-18 20:10

NVD link : CVE-2026-64773

Mitre link : CVE-2026-64773

CVE.ORG link : CVE-2026-64773

JSON object : View

Products Affected

apple

container

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2026-64773", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-64773", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-28T15:08:30.708331Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "container", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2.0", "versionType": "custom"}]}]}], "published": "2026-08-20T22:17:48.603", "references": [{"url": "https://github.com/apple/container/security/advisories/GHSA-wg28-286f-56v6", "tags": ["Patch", "Vendor Advisory", "Mitigation"], "source": "product-security@apple.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete \u2014 with no cap on how much accumulates or how long the wait can be stretched. This vulnerability is addressed in container version 1.2.0."}, {"lang": "es", "value": "Un atacante que puede alcanzar el puerto TCP publicado de un contenedor podr\u00eda ser capaz de forzar al proceso de reenv\u00edo del host a almacenar en b\u00fafer una cantidad ilimitada de los datos de ese cliente en memoria, durante el tiempo que tarde en completarse la conexi\u00f3n del contenedor de backend - sin l\u00edmite en cu\u00e1nto se acumula o cu\u00e1nto se puede prolongar la espera. Esta vulnerabilidad se aborda en la versi\u00f3n 1.2.0 del contenedor."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:container:*:*:*:*:*:swift:*:*", "vulnerable": true, "matchCriteriaId": "232C46CA-462E-4E38-99EF-8B8D14843D72", "versionEndExcluding": "1.2.0", "versionStartIncluding": "0.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}