CVE-2026-31814— Yamux remote Panic via malformed WindowUpdate credit
Quick assessment
Affected
libp2p rust-yamux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Yamux是美国libp2p开源的一个多路复用器。 Yamux 0.13.0至0.13.9之前版本存在输入验证错误漏洞，该漏洞源于特制的WindowUpdate可导致发送窗口计数算术溢出，可能触发连接状态机崩溃。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-31814
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Yamux remote Panic via malformed WindowUpdate credit
Source: CVE Program / CVE List V5
Vulnerability Description
Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a specially crafted WindowUpdate can cause arithmetic overflow in send-window accounting, which triggers a panic in the connection state machine. This is remotely reachable over a normal network connection and does not require authentication. This vulnerability is fixed in 0.13.9.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Vulnerability Title
Yamux 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Yamux是美国libp2p开源的一个多路复用器。 Yamux 0.13.0至0.13.9之前版本存在输入验证错误漏洞，该漏洞源于特制的WindowUpdate可导致发送窗口计数算术溢出，可能触发连接状态机崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| libp2p | rust-yamux | >= 0.13.0, < 0.13.9 | - |
|
II. Public POCs for CVE-2026-31814
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-31814
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-31814 (1)
IV. Related Vulnerabilities
Same vendor: libp2p
-
CVE-2026-86040
libp2p: Unbounded RPC decode + synchronous subscription proc -
CVE-2026-86039
libp2p: PeerStore accepts attacker-signed PeerRecords for a -
CVE-2026-86038
libp2p: Gossipsub StrictSign accepts attacker-signed message -
CVE-2026-61544
libp2p-quic: Remote panic via certificate expiry race during -
CVE-2026-89146
libp2p-rendezvous through 0.17.1 Denial of Service via Unbou
Same weakness: CWE-190
-
CVE-2026-107348
Integer overflow causes an infinite loop in message buffer g -
CVE-2026-92160
F´: SendPartial Integer Overflow Leading to Assertion DoS -
CVE-2026-92154
F´: File size bounds bypass in Svc::FileUplink via unsigned -
CVE-2026-101972
Junos OS and Junos OS Evolved: Malformed OSPF packets causes -
CVE-2026-92158
F´: FpySequencer Integer Overflow in Stack Offset/Size Valid
V. Comments for CVE-2026-31814
No comments yet