An gano wani rauni (CVE-2023-51714) a cikin aiwatar da ka'idar HTTP/2 a cikin ɗakin karatu na Qt, wanda ke ba shi damar rubuta bayanan sa fiye da abin da aka keɓe. Rashin lahani yana faruwa ne ta hanyar ambaliya lamba a cikin lambar tantancewa ta kai (HPack) kuma tana faruwa lokacin da aka karɓi sama da 4 GB na jimlar bayanan HTTP, ko 2 GB don kai guda ɗaya. An gyara matsalar a cikin sabuntawar Qt 5.15.17, 6.2.11, 6.5.4 da 6.6.2.
source: budenet.ru