{"id":"CVE-2025-4432","title":"A flaw was found in Rust's Ring package","summary":"A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unin…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-770"],"published":"2025-05-09","updated":"2026-06-26","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-4432","references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-4432","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350655","label":"secalert@redhat.com"},{"url":"https://github.com/advisories/GHSA-4p46-pwfr-66x6","label":"secalert@redhat.com"},{"url":"https://github.com/briansmith/ring","label":"secalert@redhat.com"},{"url":"https://github.com/briansmith/ring/blob/main/RELEASES.md#version-01712-2025-03-05","label":"secalert@redhat.com"},{"url":"https://github.com/briansmith/ring/commit/ec2d3cf1d91f148c84e4806b4f0b3c98f6df3b38","label":"secalert@redhat.com"},{"url":"https://github.com/briansmith/ring/pull/2447","label":"secalert@redhat.com"},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0009.html","label":"secalert@redhat.com"}],"tags":["nvd"],"epss":0.00986,"epssPercentile":0.60906,"ingestedAt":"2026-06-26T16:43:13.604Z","slug":"CVE-2025-4432","body":"## Overview\n\nA flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 2**32 packets sent or received.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}