CVE-2024-27316 is a vulnerability in nghttp2 where HTTP/2 incoming headers that exceed the configured limit are buffered temporarily to generate an HTTP 413 response. If a client continues to send headers beyond this limit, it can cause memory exhaustion in the server.