CVE-2026-18798
Description
Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidence that this double free is exploitable for remote code execution, thus it is considered highly impro…
Description from NVD (National Vulnerability Database).
- Product
- OpenSSL
- Severity
- CVSS 7.5 · HIGH
- Published
- Source
- NVD (National Vulnerability Database) · View on NVD
Severity is the CVSS score; the real impact depends on the version and configuration you run. Always check affected versions and fixes in the original advisory.