GHSA-4w2j-m93h-cj5jPublished
quinn-proto has remote memory exhaustion from unbounded out-of-order stream reassembly
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-25800 · Microsoft / collected KEV context
cve-program · CVE-2026-25800
- https://github.com/quinn-rs/quinn/security/advisories/GHSA-4w2j-m93h-cj5j
- https://github.com/quinn-rs/quinn/pull/2694
- https://rustsec.org/advisories/RUSTSEC-2026-0185.html
nvd · CVE-2026-25800
- https://github.com/quinn-rs/quinn/pull/2694
- https://github.com/quinn-rs/quinn/security/advisories/GHSA-4w2j-m93h-cj5j
- https://rustsec.org/advisories/RUSTSEC-2026-0185.html
osv · GHSA-4w2j-m93h-cj5j
- https://github.com/quinn-rs/quinn/security/advisories/GHSA-4w2j-m93h-cj5j
- https://github.com/quinn-rs/quinn/pull/2694
- https://github.com/quinn-rs/quinn/commit/fed0321a9a672819662caab37f5662f1ad91308e
- https://github.com/quinn-rs/quinn
- https://github.com/quinn-rs/quinn/releases/tag/quinn-proto-0.11.15
- https://rustsec.org/advisories/RUSTSEC-2026-0185.html
osv · RUSTSEC-2026-0185
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.