CVE-2025-30403 | Facebook mvfst prior 2025.07.07.00 QUIC Session heap-based overflow

A vulnerability was found in Facebook mvfst. It has been rated as critical. This issue affects some unknown processing of the component QUIC Session Handler. The manipulation leads to heap-based buffer overflow.

The identification of this vulnerability is CVE-2025-30403. The attack needs to be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.