FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

quiche -- Multiple vulnerabilities

Affected packages
		quiche	<	0.24.4

Details

VuXML ID	7b0cbc73-9955-11f0-b6e2-6805ca2fa271
Discovery	2025-06-18
Entry	2025-09-26

Quiche Releases reports:

This update includes 2 security fixes:

Medium CVE-2025-4820: Incorrect congestion window growth by optimistic ACK. Reported by Louis Navarre on 2025-06-18.

High CVE-2025-4821: Incorrect congestion window growth by invalid ACK ranges. Reported by Louis Navarre on 2025-06-18.

[source]

References

CVE Name	CVE-2025-4820
CVE Name	CVE-2025-4821
URL	https://github.com/cloudflare/quiche/releases/tag/0.24.4