Vulnerability Description
In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as demonstrated by a QPACK amplification attack. This is related to header_out_dynamic_entry and es_max_header_list_size.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://foxio.io/blog/header-accordions-qpack-amplification-attacks-against-http
- https://github.com/litespeedtech/lsquic/compare/v4.8.2...v4.9.0
- https://github.com/litespeedtech/lsquic/pull/666
FAQ
What is CVE-2026-115482?
CVE-2026-115482 is a vulnerability with a CVSS score of 7.5 (HIGH). In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as demonstrated by a QPACK amplification attack. This...
How severe is CVE-2026-115482?
CVE-2026-115482 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-115482?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.