Vulnerability CVE-2024-22590


Published: 2024-05-28

Description:
The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established.

 References:
https://gist.github.com/QUICTester/ea3eb2ac736bb63e47c654e14e3ec556

Copyright 2026, cxsecurity.com

 

Back to Top