Threats tagged 'ghsa-7g7p-w25v-9p63'

Apache bRPC versions before 1.18.0 contain out-of-bounds read vulnerabilities in URL parsing and case-insensitive header lookup on platforms where plain char is unsigned, such as ARM64. These vulnerabilities allow remote attackers to cause a denial of service by sending crafted input with high-bit bytes. The issue arises from improper index normalization when accessing lookup tables, leading to reads beyond table boundaries and process crashes.