Skip to content
Cloudflare Quiche vulnerabilities
-
cloudflare quiche
Resource exhaustion in quiche HTTP/3 and QPACK layers
CVE-2026-12523
Public exploit
7.5 High
-
cloudflare quiche
Unbounded path event queue growth in quiche via peer-driven source connection ID rotation
CVE-2026-12707
7.5 High
-
cloudflare quiche
Use-after-free in connection ID iterator and FFI functions
CVE-2026-11941
Fix available
5.6 Medium
-
cloudflare quiche
Infinite loop triggered by connection ID retirement
CVE-2025-7054
Fix available
8.7 High
-
cloudflare quiche
Incorrect congestion window growth by invalid ACK ranges
CVE-2025-4821
Fix available
7.5 High
-
cloudflare quiche
Incorrect congestion window growth by optimistic ACK
CVE-2025-4820
Fix available
5.3 Medium
-
cloudflare quiche
Unbounded storage of information related to connection ID retirement, in quiche
CVE-2024-1410
Fix available
3.7 Low
-
cloudflare quiche
Unlimited resource allocation by QUIC CRYPTO frames flooding in quiche
CVE-2024-1765
Fix available
5.9 Medium
-
cloudflare quiche
Unbounded queuing of path validation messages in cloudflare-quiche
CVE-2023-6193
Fix available
5.3 Medium