CVE-2026-11941

Cloudflare Quiche contains two use-after-free flaws in the FFI path for connection IDs. The issues affect the quiche_connection_id_iter_next and quiche_conn_retired_scid_next functions, where a owned ConnectionId is returned to the application via an argument but is dropped at the end of the func...

PT-2024-25021 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy affected versions not specified Description: A crash was observed in EnvoyQuicServerStream::OnInitialHeadersComplete due to a use-after-free issue. This occurs when QUICHE continues to push request headers after StopReading is called on...