UpHeron
All vulnerabilities

Servers and applications

CVE-2025-54939

LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.

Severity
High 7.5
Published
1 Aug 2025
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.8.4, 6.3.4
Sources
NVD

Affected software

SoftwareAffected versions
LiteSpeed Web ServerServers and applications · cpe:a:litespeedtech:litespeed_web_server
  • Every version before 6.3.4
OpenLiteSpeedServers and applications · cpe:a:litespeedtech:openlitespeed
  • Every version before 1.8.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-54939
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-54939