CVE-2025-6703CWE-20

transport/fc.rs: panic attempting to send MAX_DATA with value larger max varint

Low · published June 26, 2025

CVSS v4.0
2.3
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/AU:Y/R:A/RE:L/U:Clear
EPSS
0.00248 · 15.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-06-26T09:30Z
EPSS history
Timeline
  • 26 JUN 09:30Z
    transport/fc.rs: panic attempting to send MAX_DATA with value larger max varint
    cvelistv5