CVE-2024-2653
CVE-2024-2653
amphp/http will collect CONTINUATION frames in an unbounded buffer and will not check a limit until it has received the set END_HEADERS flag, resulting in an OOM crash.
CVSS 3.1 · 8.2 High
EPSS 80.3%
KEV · Not listed
Vendors
Products