Vulnerabilities

TI-2025-34659 CVE-2025-54939 · GHSA-839r-7hhg-xhqr

LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.

LOW 34

LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00837 Published 2025-08-01 Fixed in 4.3.1 CWE-770

TI-2024-16896 CVE-2024-25678 · GHSA-hfx2-wgxq-fp88

MEDIUM 48

In LiteSpeed QUIC (LSQUIC) Library before 4.0.4, DCID validation is mishandled.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00353 Published 2024-02-09 No fix listed CWE-354

TI-2022-12732 CVE-2022-30592 · GHSA-f3rm-fv4j-hf6v

MEDIUM 48

liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03256 Published 2022-05-11 No fix listed CWE-476