CVE-2025-24946

Summary

CVE-2025-24946 is a vulnerability affecting the hash table used in the picoquic connection management before commit b80fd3f. This issue results in a Hash Denial of Service (DoS) attack, where remote attackers can generate a substantial CPU load on the server. They accomplish this by exploiting the weak hash function used in the table and initiating connections with similar Source Connection IDs (SCIDs), causing a collision and significant processing requirements on the server side.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.