PT-2025-26172 · Quiche · Quiche

Louisna · Published 2025-06-18 · Updated 2025-08-06 · CVE-2025-4820

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions quiche versions prior to 0.24.4

Description The issue is related to incorrect congestion window growth, which could cause quiche to send data at a rate faster than the path might actually support. An unauthenticated remote attacker can exploit this by completing a handshake, initiating a congestion-controlled data transfer, and then manipulating the victim's congestion control state by sending ACK frames, exercising an opportunistic ACK attack as described in RFC 9000 Section 21.4. This could allow the victim to grow the congestion window beyond typical expectations and have more bytes in flight than the path might really support.

Recommendations For versions prior to 0.24.4, update to quiche version 0.24.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the congestion control feature until a patch is available.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-4820

GHSA-2V9P-3P3H-W56J

Affected Products

Quiche

References · 8

• https://github.com/cloudflare/quiche/security/advisories/GHSA-2v9p-3p3h-w56j · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-4820 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4820 · Security Note
• https://twitter.com/CVEnew/status/1935723292889071824 · Twitter Post
• https://t.me/cvetracker/26518 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1935401514064884009 · Twitter Post
• https://twitter.com/normanmaurer/status/1935346417570140193 · Twitter Post
• https://t.me/cveNotify/131115 · Telegram Post