CVE-2026-1788

: Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux (QUIC protocol implementation, packet processing module modules) allows : Buffer Manipulation.This issue affects Xquic Server: through 1.8.3.

CVSS

No CVSS.

References

Link	Resource
https://github.com/alibaba/xquic

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de escritura fuera de límites en Xquic Project Servidor Xquic xquic en Linux (implementación del protocolo QUIC, módulo de procesamiento de paquetes) permite: Manipulación de Búfer. Este problema afecta a Servidor Xquic: hasta 1.8.3.

03 Feb 2026, 04:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-02-03 04:15

Updated : 2026-06-17 10:16

NVD link : CVE-2026-1788

Mitre link : CVE-2026-1788

CVE.ORG link : CVE-2026-1788

JSON object : View

Products Affected

No product.

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2026-1788", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1788", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-03T17:17:50.280981Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "alibaba-cna@list.alibaba-inc.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 6.6, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Amber", "exploitMaturity": "UNREPORTED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "MODERATE", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "alibaba-cna@list.alibaba-inc.com", "affectedData": [{"repo": "https://github.com/alibaba/xquic", "vendor": "Xquic Project", "modules": ["QUIC protocol implementation", "packet processing module"], "product": "Xquic Server", "versions": [{"status": "affected", "changes": [{"at": "1.9.0", "status": "unaffected"}], "version": "0", "versionType": "custom", "lessThanOrEqual": "1.8.3"}], "platforms": ["Linux"], "packageName": "xquic", "collectionURL": "https://github.com", "defaultStatus": "unaffected"}]}], "published": "2026-02-03T04:15:56.190", "references": [{"url": "https://github.com/alibaba/xquic", "source": "alibaba-cna@list.alibaba-inc.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "alibaba-cna@list.alibaba-inc.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": ": Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux (QUIC protocol implementation, packet processing module modules) allows : Buffer Manipulation.This issue affects Xquic Server: through 1.8.3."}, {"lang": "es", "value": "Vulnerabilidad de escritura fuera de l\u00edmites en Xquic Project Servidor Xquic xquic en Linux (implementaci\u00f3n del protocolo QUIC, m\u00f3dulo de procesamiento de paquetes) permite: Manipulaci\u00f3n de B\u00fafer. Este problema afecta a Servidor Xquic: hasta 1.8.3."}], "lastModified": "2026-06-17T10:16:31.227", "sourceIdentifier": "alibaba-cna@list.alibaba-inc.com"}