Bug 2506588 (CVE-2026-25800) - CVE-2026-25800 quinn: Quinn: Remote memory exhaustion via malformed QUIC stream fragments
Summary: CVE-2026-25800 quinn: Quinn: Remote memory exhaustion via malformed QUIC stre...
Keywords:
Status: NEW
Alias: CVE-2026-25800
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2524243 2524244
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-23 20:02 UTC by OSIDB Bzimport
Modified: 2026-08-26 04:17 UTC (History)
59 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-07-23 20:02:15 UTC
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion. Version 0.11.15 fixes the issue.


Note You need to log in before you can comment on or make changes to this bug.