cve 2024 2398

The curl project’s advisory for CVE-2024-2398 describes a straightforward but consequential bug: when an application enables HTTP/2 server push, libcurl can leak previously allocated header memory if a pushed stream exceeds the library’s header limit and is aborted — a leak that can amount to...