CVE-2026-84784

Name of the Vulnerable Software and Affected Versions OpenSSL (affected versions not specified)

Description A malicious remote peer can flood the local QUIC stack with NEW CONNECTION ID frames by bypassing the limit check on the number of connection IDs the remote stack can use. The local stack responds to each NEW CONNECTION ID frame by sending a RETIRE CONN ID frame via the Control Frame Queue (CFQ). If the remote peer withholds ACKs, the local stack can be forced to allocate approximately 400MB of memory. This occurs because the stack incorrectly retires the destination CID immediately upon receiving the NEW CONNECTION ID frame, rather than waiting for an ACK for the RETIRE CONNECTION ID frame as required by RFC 9000.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.