CVE-2020-24944: Privateoctopus Picoquic

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

picoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop) via a crafted QUIC frame, related to the picoquic_decode_frames and picoquic_decode_stream_frame functions and epoch==3.

Affected products

• Privateoctopus Picoquic: before 2020-07-03 (fixed in 2020-07-03)

Published 2021-02-08. Last modified 2026-06-17.