Skip to content
Threat Feed
Subscribe

Vendor

Quic-Go_project

1 brief RSS
medium advisory

CVE-2026-40898: quic-go HTTP/3 Memory Exhaustion DoS

A vulnerability in quic-go, an implementation of the QUIC protocol in Go, allows a remote attacker to cause a denial-of-service (DoS) condition by sending specially crafted QPACK-encoded HEADERS frames with large trailer field sections, leading to excessive memory allocation in affected HTTP/3 client and server implementations prior to version 0.59.1.

PoC quic-go denial-of-service vulnerability network http3 quic golang
1t 2c updated