Skip to content
Sign in
5.3 Medium

CVE-2026-10740 Unbounded memory allocation in the CRYPTO frame reassembler in s2n-quic before 1.8.2 may allow an unauthenticated remote…

Description

Unbounded memory allocation in the CRYPTO frame reassembler in s2n-quic before 1.8.2 may allow an unauthenticated remote actor to cause a denial of service (degraded availability) by sending crafted QUIC Initial packets. To remediate this issue, users should upgrade to v1.8.2.

Affected products and versions

Product Affected versions Fixed in
s2n-quic 1.8 earliest → 1.8.1 No fix stated

Other CVEs of s2n-quic

The 2 CVEs of s2n-quic →
CVE-2026-94450 Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an… 7.5 High
Track this CVE