Skip to content
OpenAdvisories

Package · Alpine

ngtcp2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-40170

    ngtcp2 has a qlog transport parameter serialization stack buffer overflow

    ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote…

    ngtcp2 ngtcp2 ngtcp2 ngtcp2 Debian Ubuntu Alpine