VDB
GO-2025-4017
GO-2025-4017
PUBLISHED
Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | quic-go/quic-go | 0, 0.50.0, 0 |
Timeline
- Nov 5, 2025 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw advisory
- https://github.com/quic-go/quic-go/commit/bc5bccf10fd02728eef150683eb4dfaa5c0e749c patch
- https://github.com/quic-go/quic-go/commit/ce7c9ea8834b9d2ed79efa9269467f02c0895d42 patch
- https://github.com/quic-go/quic-go/pull/5354 patch
- https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685 url