CVE-2025-13945
Vulnerability in Wireshark
CVSS score
5.5
EPSS probability
%0.2
Risk score
0.0
Published
10 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory to a much larger set, the attacker can force the server to use thousands of times more memory than it received, enough to run a default server
Similar Vulnerabilities
8.8
CVE-2026-5402Vulnerability in Wireshark
Patch status unknown Public Exploits:1EPSS %1
8.1
CVE-2026-76886Heap-based Buffer Overflow in Wireshark
Patch status unknown Public Exploits:1EPSS %0
8.1
CVE-2026-95389Heap-based Buffer Overflow in Wireshark
Patch status unknownEPSS %0
7.5
CVE-2026-76928NULL Pointer Dereference in Wireshark
Patch status unknownEPSS %0
7.5
CVE-2026-76879Stack-based Buffer Overflow in Wireshark
Patch status unknownEPSS %0
7.5
CVE-2026-15169Vulnerability in Wireshark
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-13945"