8.1
High
CVE-2025-30403 A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session
Description
A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session. This issue affects mvfst versions prior to v2025.07.07.00.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mvfst 2025.03 | 2025.03.24.00 → < 2025.07.07.00 | 2025.07.07.00 |