tag
Heap-Oob-Read
Critical
XRING — XQUIC QPACK Ring Buffer Resize Underflow (Remote Unauthenticated DoS)
[alibaba/xquic](https://github.com/alibaba/xquic) — QUIC/HTTP-3 library, used by Tengine and reportedly across Alibaba's cloud/CDN infrastructure (Taobao, AliPay)
unpatched
Medium
PJSIP DNS Compression Pointer Heap Out-of-Bounds Read (CVE-2026-32945)
CVE-2026-32945·
pjproject (PJSIP library) — used by Asterisk, FreeSWITCH, and other SIP applications
patched