Cloudflare quiche Schwachstellen (CVE)

Für Cloudflare quiche veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

6 Ergebnisse
7.5Hoch
CVE-2026-12523

Resource exhaustion in quiche HTTP/3 and QPACK layers

Cloudflare quiche

Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames. Impact HTTP/3 defines multiple frame types to support HTTP message exchanges and connection m…

5.6Mittel
CVE-2026-11941

Use-after-free in connection ID iterator and FFI functions

Cloudflare Quiche

Cloudflare Quiche was affected by 2 use-after-free vulnerabilities in the connection ID iterator FFI functions. The “quiche_connection_id_iter_next” and “quiche_conn_retired_scid_next” functions would return a pointer to a “ConnectionId” to the application…

8.7Hoch
CVE-2025-7054

Infinite loop triggered by connection ID retirement

Cloudflare quiche

Cloudflare quiche was discovered to be vulnerable to an infinite loop when sending packets containing RETIRE_CONNECTION_ID frames. QUIC connections possess a set of connection identifiers (IDs); see Section 5.1 of RFC 9000 https://datatracker.ietf.org/doc/h…

7.5Hoch
CVE-2025-4821

Incorrect congestion window growth by invalid ACK ranges

Cloudflare quiche

Impact Cloudflare quiche was discovered to be vulnerable to incorrect congestion window growth, which could cause it to send data at a rate faster than the path might actually support. An unauthenticated remote attacker can exploit the vulnerability by firs…

1.0%EPSS
5.3Mittel
CVE-2025-4820

Incorrect congestion window growth by optimistic ACK

Cloudflare quiche

Impact Cloudflare quiche was discovered to be vulnerable to incorrect congestion window growth, which could cause it to send data at a rate faster than the path might actually support. An unauthenticated remote attacker can exploit the vulnerability by firs…