QU
Product
quiche
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 5Low 0
Watch
Add quiche to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12523 | 7.5 | Jul 14 | Resource exhaustion in quiche HTTP/3 and QPACK layers Affected: 0.1.0 before 0.29.3 |
| CVE-2026-12707 | 7.5 | Jul 14 | Unbounded path event queue growth in quiche via peer-driven source connection ID rotation Affected: 0.15.0 before 0.29.3 |
| CVE-2025-4821 | 7.5 | Jun 18 | Incorrect congestion window growth by invalid ACK ranges Affected: <0.24.4 |
| CVE-2024-1765 | 7.5 | Mar 12 | Cloudflare Quiche (through version 0.19.1/0.20.0) was affected by an unlimited resource allocation vulnerability causing rapid increase of memory usage of the system running… Affected: before 0.19.2; 0.20.0 |
| CVE-2025-7054 | 6.5 | Aug 7 | Infinite loop triggered by connection ID retirement Affected: 0.15.0 before 0.24.5 |
| CVE-2026-11941 | 5.6 | Jun 19 | Use-after-free in connection ID iterator and FFI functions Affected: 0.20.0 through 0.29.1 |
| CVE-2025-4820 | 5.3 | Jun 18 | Incorrect congestion window growth by optimistic ACK Affected: <0.24.4 |
| CVE-2024-1410 | 5.3 | Mar 12 | Cloudflare quiche was discovered to be vulnerable to unbounded storage of information related to connection ID retirement, which could lead to excessive resource consumption Affected: before 0.19.2; 0.20.0 |
| CVE-2023-6193 | 5.3 | Dec 12 | quiche v. 0.15.0 through 0.19.0 was discovered to be vulnerable to unbounded queuing of path validation messages, which could lead to excessive resource consumption. QUIC path… Affected: 0.15.0 through 0.19.0 |
Showing 9