CVE-2024-34161 is a medium severity vulnerability in NGINX Plus and NGINX OSS when configured with the HTTP/3 QUIC module. It occurs if the network infrastructure supports an MTU of 4096 bytes or greater without fragmentation. Under these conditions, certain QUIC packets can cause NGINX worker processes to leak previously freed memory. This issue affects NGINX versions from 1.25.0 up to but not including 1.26.1. A patch is available to address this vulnerability.