CVE-2023-40711

7.5 highEPSS 1.0%

High (7.5) in veilid veilid. EPSS 1.0% chance of exploitation in the next 30 days.

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service (out-of-memory abort) via crafted packet data, as exploited in the wild in August 2023.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2023-08-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

veilid:veilid

References

https://gitlab.com/veilid/veilid/-/blob/main/CHANGELOG.md
https://gitlab.com/veilid/veilid/-/blob/main/CHANGELOG.md

Check your stack JSON