CVE-2020-24944

7.5 highEPSS 1.5%

High (7.5) in privateoctopus picoquic. EPSS 1.5% chance of exploitation in the next 30 days.

picoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop) via a crafted QUIC frame, related to the picoquic_decode_frames and picoquic_decode_stream_frame functions and epoch==3.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-835
Published: 2021-02-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

privateoctopus:picoquic

References

https://github.com/private-octopus/picoquic/issues/969
https://github.com/private-octopus/picoquic/issues/969

Check your stack JSON