CVE-2026-25800

A flaw was found in Quinn, a Rust implementation of the QUIC transport protocol. A remote attacker can exploit this vulnerability by sending specially crafted QUIC stream fragments with many gaps. This can lead to high buffer overhead in the Assembler component, causing memory exhaustion and a denial of service (DoS) for the receiving connection.

This is an Important denial of service vulnerability in the Quinn QUIC protocol implementation, which can lead to remote memory exhaustion. An unauthenticated attacker could exploit this by sending specially crafted QUIC stream fragments with many gaps, causing excessive buffer overhead on the receiving connection.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.