CVE-2025-54939

🗓️ 01 Aug 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 68 Views

LiteSpeed QUIC Library prior to 4.3.1 has a memory leak issue in lsquic_engine_packet_in function.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-54939	19 Aug 202506:30	–	circl
CNNVD	Litespeed Technologie LiteSpeed QUIC 安全漏洞	1 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-54939	1 Aug 202500:00	–	cvelist
EUVD	EUVD-2025-23337	3 Oct 202520:07	–	euvd
Imperva Blog	QUIC-LEAK (CVE-2025-54939): New High-Risk Pre-Handshake Remote Denial of Service in LSQUIC QUIC Implementation	18 Aug 202517:23	–	impervablog
Kitploit	CVE-2025-54939	8 Oct 202613:15	–	kitploit
Mend	CVE-2025-54939	1 Aug 202500:00	–	mend
NVD	CVE-2025-54939	1 Aug 202506:15	–	nvd
Positive Technologies	PT-2025-31606	1 Aug 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-54939: Allocation of Resources Without Limits or Throttling	1 Aug 202500:00	–	rapid7

NVD

Vulners

CNA

Node

litespeedtech litespeed_web_adcRange<3.3.1

litespeedtech litespeed_web_serverRange<6.3.4

litespeedtech lsquicRange<4.3.1

litespeedtech openlitespeedRange<1.8.4

[
  {
    "defaultStatus": "unaffected",
    "product": "LSQUIC",
    "vendor": "litespeedtech",
    "versions": [
      {
        "lessThan": "4.3.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
blog	www.blog.litespeedtech.com/2025/08/18/litespeed-security-update/
github	www.github.com/litespeedtech/lsquic/commit/4cd9252e77fb4a36b572e2167a84067d603d3b23
github	www.github.com/litespeedtech/lsquic/blob/70486141724f85e97b08f510673e29f399bbae8f/CHANGELOG
imperva	www.imperva.com/blog/quic-leak-cve-2025-54939-new-high-risk-pre-handshake-remote-denial-of-service-in-lsquic-quic-implementation/

17 Jun 2026 09:40Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.3 - 7.5

EPSS0.00797

SSVC