A vulnerability in github.com/apernet/hysteria/core/v2 allows a valid authenticated user to crash the server by causing an out-of-memory (OOM) condition when the sniff feature is enabled. This occurs because the server allocates memory based on a crafted QUIC packet's crypto length, which can be maliciously large.