HAProxy versions prior to certain fixed releases contain a null pointer dereference vulnerability in the hpack_dht_insert() function. This flaw occurs when the return value of hpack_dht_defrag() is not validated under memory exhaustion conditions, allowing an attacker to cause a denial of service by crashing worker processes through HPACK dynamic table insertions under memory pressure.