ngtcp2 vulnerabilities (openSUSE)

2 vulnerabilities.

• ngtcp2 openSUSE ngtcp2 has a qlog transport parameter serialization stack buffer overflow CVE-2026-40170 Fix available 7.5 HighApril 16, 2026
• ngtcp2 openSUSE Acks not validated before logged to qlog leads to buffer overflow in ngtcp2 CVE-2024-52811 Fix available 8.2 HighNovember 25, 2024