Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parser

Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count

Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser

Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crash

Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Message

Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service

Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsing

Apache bRPC: Authentication bypass when a server sets ServerOptions.internal_port and ServerOptions.auth

Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprof

Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsing

Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration

Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments

Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service

Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service

Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client

Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames

Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request

Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly

Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling

Apache bRPC: Missing Authentication for Streaming RPC Frames

Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes

Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Path

Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder

Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling

Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service

Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names

Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platforms

Apache bRPC: Memory Exhaustion Through Inconsistent Message Body Limits

Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation

Apache bRPC: Out-of-Bounds Write in Redis Command Parser

Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser

Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser

Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser

Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding

Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests