CVE-2026-10740 MEDIUM

CVE-2026-10740: Excessive memory allocation in s2n-quic

Vendor Aws
Product s2n-quic
Weakness CWE-770 · Uncontrolled resource consumption
Published June 10, 2026
Last update June 10, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

Unbounded memory allocation in the CRYPTO frame reassembler in s2n-quic before 1.8.2 may allow an unauthenticated remote actor to cause a denial of service (degraded availability) by sending crafted QUIC Initial packets. To remediate this issue, users should upgrade to v1.8.2.

Key dates

02Disclosure timeline

June 10, 2026 CVE published
June 10, 2026 Record updated