CVE-2026-31812 Details
Description
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.
A denial-of-service vulnerability has been identified in Quinn, a Rust-based implementation of the IETF QUIC transport protocol, prior to version 0.11.14. The issue allows remote, unauthenticated attackers to cause a panic in applications using the affected Quinn versions by sending a crafted QUIC Initial packet with malformed transport parameters. The vulnerability arises because the parsing logic in quinn-proto decodes attacker-controlled varints using unwrap(), leading to a panic when encountering truncated encodings. This issue can be exploited over the network with a single packet, without any prior trust or authentication.
Users can upgrade to Quinn version 0.11.14 or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Mar 10, 2026CISA-ADP
Assessed Mar 11, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2026:13545 | redhat-SADP | |
| https://access.redhat.com/errata/RHSA-2026:19712 | redhat-SADP | |
| https://access.redhat.com/errata/RHSA-2026:22862 | redhat-SADP | |
| https://access.redhat.com/errata/RHSA-2026:5459 | redhat-SADP | |
| https://access.redhat.com/security/cve/CVE-2026-31812 | redhat-SADP | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2446330 | redhat-SADP | |
| https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31812.json | redhat-SADP | |
| https://github.com/quinn-rs/quinn/security/advisories/GHSA-6xvm-j4wr-6v98 | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-248 | Uncaught Exception | redhat-SADP |
| CWE-248 | Uncaught Exception | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| quinn | 0.11.13 (semver) |
CPE
Remediation
| |
| quinn-proto | All versions |
CPE
Remediation
| |
Change History
11 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 25, 2026 | CVE Modified | redhat-SADP |
| Aug 11, 2026 | CVE Modified | redhat-SADP |
| Aug 10, 2026 | CVE Modified | redhat-SADP |
| Aug 6, 2026 | CVE Modified | redhat-SADP |
| Aug 3, 2026 | CVE Modified | redhat-SADP |
| Jul 27, 2026 | CVE Modified | redhat-SADP |
| Jul 15, 2026 | CVE Modified | redhat-SADP |
| Jun 30, 2026 | CVE Modified | redhat-SADP |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Mar 10, 2026 | New CVE Received | [email protected] |