CVE-2025-30403
High
Description
A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session. This issue affects mvfst versions prior to v2025.07.07.00.
SeverityHigh
CVSS8.1
Exploit probability—
ProductFacebook Mvfst
PublishedJul 11, 2025
First seenJul 11, 2025
How to fix
Update
- Facebook mvfstv2025.07.07.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Facebook mvfst | v2025.03.24.00 ≤ v < v2025.07.07.00 | v2025.07.07.00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.