CVE-2026-14456 (GCVE-0-2026-14456)
Vulnerability from cvelistv5 – Published: 2026-08-13 13:55 – Updated: 2026-08-13 17:41
VLAI
EPSS
VEX
Title
Unbounded Memory Growth in QUIC Server Incoming Channel Queue
Summary
Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes
valid QUIC Initial packets for unknown destination connection IDs, it
can allocate and queue new incoming channels without enforcing any limit.
Impact summary: A remote peer that can make many Initial packets reach the
server listener faster than the application accepts connections, can cause the
memory allocated to store the per-channel state to grow without any limits,
potentially making the QUIC listener unavailable and causing Denial of Service.
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Description: The function that handles inbound QUIC packets uses
Connection-Id from the packet header to find an existing connection
(QUIC channel). If no existing connection is found and the packet
type is INITIAL, the function treats the packet as a new connection. It
allocates a new channel object and inserts it into a queue where it
waits to be accepted by the local application with SSL_accept(3ossl).
The memory occupied by these initial channel objects may grow
without bounds if the application is not able to call SSL_accept()
frequently enough to serve these inbound connection requests.
The issue is present since OpenSSL 3.5 when the QUIC server implementation
was added.
The fix introduces a limit for pending connections. The default limit is set
to 256 pending connections (waiting to be accepted by the local application).
Applications may change the default by calling SSL_set_value_uint(3ossl).
FIPS impact: no
The FIPS module is not affected as the QUIC implementation is outside of
the OpenSSL FIPS module boundary.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-13 17:41 UTC
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Assigner
References
5 references
Impacted products
Date Public
2026-08-13 07:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2026-08-13T16:18:19.434Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2026/08/13/4"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-14456",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-13T17:41:23.819585Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T17:41:29.420Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "OpenSSL",
"vendor": "OpenSSL",
"versions": [
{
"lessThan": "4.0.2",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
},
{
"lessThan": "3.6.4",
"status": "affected",
"version": "3.6.0",
"versionType": "semver"
},
{
"lessThan": "3.5.8",
"status": "affected",
"version": "3.5.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Filipe Casal (Trail of Bits)"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Alexandr Nedvedicky"
}
],
"datePublic": "2026-08-13T07:00:13.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\u003cbr\u003evalid QUIC Initial packets for unknown destination connection IDs, it\u003cbr\u003ecan allocate and queue new incoming channels without enforcing any limit.\u003cbr\u003e\u003cbr\u003eImpact summary: A remote peer that can make many Initial packets reach the\u003cbr\u003eserver listener faster than the application accepts connections, can cause the\u003cbr\u003ememory allocated to store the per-channel state to grow without any limits,\u003cbr\u003epotentially making the QUIC listener unavailable and causing Denial of Service.\u003cbr\u003e\u003cbr\u003eCWE: CWE-770: Allocation of Resources Without Limits or Throttling\u003cbr\u003e\u003cbr\u003eDescription: The function that handles inbound QUIC packets uses\u003cbr\u003eConnection-Id from the packet header to find an existing connection\u003cbr\u003e(QUIC channel). If no existing connection is found and the packet\u003cbr\u003etype is INITIAL, the function treats the packet as a new connection. It\u003cbr\u003eallocates a new channel object and inserts it into a queue where it\u003cbr\u003ewaits to be accepted by the local application with SSL_accept(3ossl).\u003cbr\u003eThe memory occupied by these initial channel objects may grow\u003cbr\u003ewithout bounds if the application is not able to call SSL_accept()\u003cbr\u003efrequently enough to serve these inbound connection requests.\u003cbr\u003e\u003cbr\u003eThe issue is present since OpenSSL 3.5 when the QUIC server implementation\u003cbr\u003ewas added.\u003cbr\u003e\u003cbr\u003eThe fix introduces a limit for pending connections. The default limit is set\u003cbr\u003eto 256 pending connections (waiting to be accepted by the local application).\u003cbr\u003eApplications may change the default by calling SSL_set_value_uint(3ossl).\u003cbr\u003e\u003cbr\u003eFIPS impact: no\u003cbr\u003eThe FIPS module is not affected as the QUIC implementation is outside of\u003cbr\u003ethe OpenSSL FIPS module boundary."
}
],
"value": "Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."
}
],
"metrics": [
{
"format": "other",
"other": {
"content": {
"text": "Low"
},
"type": "https://openssl-library.org/policies/general/security-policy/"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "CWE-770 Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T13:55:52.370Z",
"orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"shortName": "openssl"
},
"references": [
{
"name": "OpenSSL Advisory",
"tags": [
"vendor-advisory"
],
"url": "https://openssl-library.org/news/secadv/20260813.txt"
},
{
"name": "4.0 branch git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139"
},
{
"name": "3.6 branch git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b"
},
{
"name": "3.5 branch git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Unbounded Memory Growth in QUIC Server Incoming Channel Queue",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"assignerShortName": "openssl",
"cveId": "CVE-2026-14456",
"datePublished": "2026-08-13T13:55:52.370Z",
"dateReserved": "2026-07-02T08:35:57.518Z",
"dateUpdated": "2026-08-13T17:41:29.420Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2026-14456\",\"sourceIdentifier\":\"openssl-security@openssl.org\",\"published\":\"2026-08-13T15:19:31.820\",\"lastModified\":\"2026-08-13T18:17:18.367\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\\nvalid QUIC Initial packets for unknown destination connection IDs, it\\ncan allocate and queue new incoming channels without enforcing any limit.\\n\\nImpact summary: A remote peer that can make many Initial packets reach the\\nserver listener faster than the application accepts connections, can cause the\\nmemory allocated to store the per-channel state to grow without any limits,\\npotentially making the QUIC listener unavailable and causing Denial of Service.\\n\\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\\n\\nDescription: The function that handles inbound QUIC packets uses\\nConnection-Id from the packet header to find an existing connection\\n(QUIC channel). If no existing connection is found and the packet\\ntype is INITIAL, the function treats the packet as a new connection. It\\nallocates a new channel object and inserts it into a queue where it\\nwaits to be accepted by the local application with SSL_accept(3ossl).\\nThe memory occupied by these initial channel objects may grow\\nwithout bounds if the application is not able to call SSL_accept()\\nfrequently enough to serve these inbound connection requests.\\n\\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\\nwas added.\\n\\nThe fix introduces a limit for pending connections. The default limit is set\\nto 256 pending connections (waiting to be accepted by the local application).\\nApplications may change the default by calling SSL_set_value_uint(3ossl).\\n\\nFIPS impact: no\\nThe FIPS module is not affected as the QUIC implementation is outside of\\nthe OpenSSL FIPS module boundary.\"}],\"affected\":[{\"source\":\"openssl-security@openssl.org\",\"affectedData\":[{\"vendor\":\"OpenSSL\",\"product\":\"OpenSSL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"4.0.0\",\"lessThan\":\"4.0.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.6.0\",\"lessThan\":\"3.6.4\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.5.0\",\"lessThan\":\"3.5.8\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-13T17:41:23.819585Z\",\"id\":\"CVE-2026-14456\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"openssl-security@openssl.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]}],\"references\":[{\"url\":\"https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://openssl-library.org/news/secadv/20260813.txt\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/08/13/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2026/08/13/4\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-08-13T16:18:19.434Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-14456\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-13T17:41:23.819585Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-13T17:41:12.508Z\"}}], \"cna\": {\"title\": \"Unbounded Memory Growth in QUIC Server Incoming Channel Queue\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"Filipe Casal (Trail of Bits)\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"Alexandr Nedvedicky\"}], \"metrics\": [{\"other\": {\"type\": \"https://openssl-library.org/policies/general/security-policy/\", \"content\": {\"text\": \"Low\"}}, \"format\": \"other\"}], \"affected\": [{\"vendor\": \"OpenSSL\", \"product\": \"OpenSSL\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0.0\", \"lessThan\": \"4.0.2\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.6.0\", \"lessThan\": \"3.6.4\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.5.0\", \"lessThan\": \"3.5.8\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2026-08-13T07:00:13.000Z\", \"references\": [{\"url\": \"https://openssl-library.org/news/secadv/20260813.txt\", \"name\": \"OpenSSL Advisory\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139\", \"name\": \"4.0 branch git commit\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b\", \"name\": \"3.6 branch git commit\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9\", \"name\": \"3.5 branch git commit\", \"tags\": [\"patch\"]}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\\nvalid QUIC Initial packets for unknown destination connection IDs, it\\ncan allocate and queue new incoming channels without enforcing any limit.\\n\\nImpact summary: A remote peer that can make many Initial packets reach the\\nserver listener faster than the application accepts connections, can cause the\\nmemory allocated to store the per-channel state to grow without any limits,\\npotentially making the QUIC listener unavailable and causing Denial of Service.\\n\\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\\n\\nDescription: The function that handles inbound QUIC packets uses\\nConnection-Id from the packet header to find an existing connection\\n(QUIC channel). If no existing connection is found and the packet\\ntype is INITIAL, the function treats the packet as a new connection. It\\nallocates a new channel object and inserts it into a queue where it\\nwaits to be accepted by the local application with SSL_accept(3ossl).\\nThe memory occupied by these initial channel objects may grow\\nwithout bounds if the application is not able to call SSL_accept()\\nfrequently enough to serve these inbound connection requests.\\n\\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\\nwas added.\\n\\nThe fix introduces a limit for pending connections. The default limit is set\\nto 256 pending connections (waiting to be accepted by the local application).\\nApplications may change the default by calling SSL_set_value_uint(3ossl).\\n\\nFIPS impact: no\\nThe FIPS module is not affected as the QUIC implementation is outside of\\nthe OpenSSL FIPS module boundary.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\u003cbr\u003evalid QUIC Initial packets for unknown destination connection IDs, it\u003cbr\u003ecan allocate and queue new incoming channels without enforcing any limit.\u003cbr\u003e\u003cbr\u003eImpact summary: A remote peer that can make many Initial packets reach the\u003cbr\u003eserver listener faster than the application accepts connections, can cause the\u003cbr\u003ememory allocated to store the per-channel state to grow without any limits,\u003cbr\u003epotentially making the QUIC listener unavailable and causing Denial of Service.\u003cbr\u003e\u003cbr\u003eCWE: CWE-770: Allocation of Resources Without Limits or Throttling\u003cbr\u003e\u003cbr\u003eDescription: The function that handles inbound QUIC packets uses\u003cbr\u003eConnection-Id from the packet header to find an existing connection\u003cbr\u003e(QUIC channel). If no existing connection is found and the packet\u003cbr\u003etype is INITIAL, the function treats the packet as a new connection. It\u003cbr\u003eallocates a new channel object and inserts it into a queue where it\u003cbr\u003ewaits to be accepted by the local application with SSL_accept(3ossl).\u003cbr\u003eThe memory occupied by these initial channel objects may grow\u003cbr\u003ewithout bounds if the application is not able to call SSL_accept()\u003cbr\u003efrequently enough to serve these inbound connection requests.\u003cbr\u003e\u003cbr\u003eThe issue is present since OpenSSL 3.5 when the QUIC server implementation\u003cbr\u003ewas added.\u003cbr\u003e\u003cbr\u003eThe fix introduces a limit for pending connections. The default limit is set\u003cbr\u003eto 256 pending connections (waiting to be accepted by the local application).\u003cbr\u003eApplications may change the default by calling SSL_set_value_uint(3ossl).\u003cbr\u003e\u003cbr\u003eFIPS impact: no\u003cbr\u003eThe FIPS module is not affected as the QUIC implementation is outside of\u003cbr\u003ethe OpenSSL FIPS module boundary.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"CWE-770 Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"3a12439a-ef3a-4c79-92e6-6081a721f1e5\", \"shortName\": \"openssl\", \"dateUpdated\": \"2026-08-13T13:55:52.370Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-14456\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-13T17:41:29.420Z\", \"dateReserved\": \"2026-07-02T08:35:57.518Z\", \"assignerOrgId\": \"3a12439a-ef3a-4c79-92e6-6081a721f1e5\", \"datePublished\": \"2026-08-13T13:55:52.370Z\", \"assignerShortName\": \"openssl\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…