CVE-2026-6328

XQUIC Improper STREAM Frame Validation in Initial/Handshake Packets

CVSS 8.3 HIGHEPSS 0.2%CWE-20 CWE-347

Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux (QUIC protocol implementation, packet processing module, STREAM frame handler modules) allows Protocol Manipulation.This issue affects XQUIC: through 1.8.3.

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

Produtos afetados

XQUIC Project · XQUIC

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/alibaba/xquic/commit/4764604a0e487eeb49338b4498aecda2194eae84