CVE-2023-52266

CVE-2023-52266 affects ehttp 1.0.6 prior to 17405b9. The root cause is a use-after-free in the epoll_socket.cpp read_func, enabling an attacker to trigger memory corruption by opening many connections in a short time. Documented references consistently describe the issue and indicate a fix is ava...

CVE-2023-52267

The CVE-2023-52267 issue affects ehttp 1.0.6 and earlier, where an out-of-bounds read occurs in simple_log.cpp _log during logging of long strings, leading to memory corruption. The vulnerability is triggered in versions before 17405b9. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) wit...