Cloudflare Quiche

• CVE-2026-12523 High 7.5 Resource exhaustion in quiche HTTP/3 and QPACK layers 0.5%
• CVE-2026-12707 High 7.5 Unbounded path event queue growth in quiche via peer-driven source connection ID rotation 0.4%
• CVE-2026-11941 Medium 5.6 Use-after-free in connection ID iterator and FFI functions 0.3%
• CVE-2025-7054 High 8.7 Infinite loop triggered by connection ID retirement 0.4%
• CVE-2025-4821 High 7.5 Incorrect congestion window growth by invalid ACK ranges 1.0%
• CVE-2025-4820 Medium 5.3 Incorrect congestion window growth by optimistic ACK 0.9%
• CVE-2024-1410 Low 3.7 Unbounded storage of information related to connection ID retirement, in quiche 0.7%
• CVE-2024-1765 Medium 5.9 Unlimited resource allocation by QUIC CRYPTO frames flooding in quiche 1.1%
• CVE-2023-6193 Medium 5.3 Unbounded queuing of path validation messages in cloudflare-quiche 0.8%