CVE-2024-32984

CVE-2024-32984 affects Rust Yamux (libp2p) where the pending_frames vector is unbounded, allowing an attacker to cause memory exhaustion by triggering frame enqueues via Identify streams or Yamux Ping frames. Under backpressure by TCP receive windows, the queue can grow until the process is kille...