CVE-2025-30403

8.1 highEPSS 0.3%

High (8.1). EPSS 0.3% chance of exploitation in the next 30 days.

A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session. This issue affects mvfst versions prior to v2025.07.07.00.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
Published: 2025-07-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/facebook/mvfst/commit/65b297332191de6e867c4a3139a233fc84c0e7e0
https://www.facebook.com/security/advisories/cve-2025-30403

Check your stack JSON