UpHeron
All vulnerabilities

Servers and applications

CVE-2026-54873

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote…

Severity
High 7.5
Published
29 Sept 2026
Last changed
8 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.4.8, 3.5.9, 3.6.5, 4.0.3
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 3.4.0 before 3.4.8
  • From 3.5.0 before 3.5.9
  • From 3.6.0 before 3.6.5
  • From 4.0.0 before 4.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-54873
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-54873