← Database

CVE-2026-33814

HIGH CVSS: 7.5 Published: 2026-05-07 Modified: 2026-08-19

Description

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Affected Platforms

Golang GoGolang Http2

Weakness Type

CWE-835, CWE-606

References