Ngtcp2 vulnerabilities

Products

• Ngtcp2 2

Newest

• ngtcp2, red hat enterprise linux 10, enterprise linux 8 +2 more +4 more ngtcp2 has a qlog transport parameter serialization stack buffer overflow CVE-2026-40170 Fix available 7.5 HighApril 16, 2026
• ngtcp2 Acks not validated before logged to qlog leads to buffer overflow in ngtcp2 CVE-2024-52811 Fix available 8.2 HighNovember 25, 2024