The vulnerability is a use-of-uninitialized-value detected in the XpackDynamicTable::_make_space function of Apache Trafficserver, as reported by OSS-Fuzz (OSV-2024-451). The crash occurs during dynamic table space management, potentially leading to undefined behavior. Affected versions include Trafficserver releases 10.0.0-rc0 through 10.1.4-rc0 and later commits starting from 9d93106ef93371284fa13772c7dd37cbf1c8fd7a. There is no CVSS score or vendor advisory indicating a patch or mitigation status. No known exploits have been reported in the wild.

The use-of-uninitialized-value vulnerability can cause undefined behavior, including potential crashes or memory corruption, which may affect the stability or security of the Trafficserver application. However, no active exploitation is known, and the impact is currently assessed as medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor official Apache Trafficserver communications and OSS-Fuzz reports for updates. No specific mitigation steps are provided in the available data.