CVEvulnerability

CVE-2025-54939

7.5 HIGH Published 2025-08-01 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-08-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-401, CWE-770

Description

LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.

Affected configurations

• litespeedtech litespeed web adc (< 3.3.1) • litespeedtech litespeed web server (< 6.3.4) • litespeedtech lsquic (< 4.3.1) • litespeedtech openlitespeed (< 1.8.4)

Related

Weakness · CWE (2)

  • CWE-401 Missing Release of Memory after Effective Lifetime weakness
  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References