Description (CNA)
A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session. This issue affects mvfst versions prior to v2025.07.07.00.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Facebook / mvfst | affected v2025.03.24.00 before v2025.07.07.00 |
CWE
No CWE identifiers supplied.
References
- https://www.facebook.com/security/advisories/cve-2025-30403
- https://github.com/facebook/mvfst/commit/65b297332191de6e867c4a3139a233fc84c0e7e0
ADP enrichment
No English description supplied.
No references supplied.