A vulnerability in the Qt implementation of the HTTP/2 protocol.
A vulnerability (CVE-2023-51714) has been discovered in the Qt library's implementation of the HTTP/2 protocol, allowing data to be written beyond the allocated buffer. This vulnerability is caused by an integer overflow in the code handling packed headers (HPack) and manifests when receiving more than 4 GB of total HTTP header data or 2 GB for a single header. The problem has been addressed in Qt updates 5.15.17, 6.2.11, 6.5.4, and 6.6.2. […]
