Dejan Alvadzijevic

The issue is related to the improper parsing of a multipart/form-data boundary in the MHD create post processor() method. This can be exploited by an attacker to send a malicious HTTP POST packet, potentially resulting in an out-of-bounds read and a crash in the find boundary() function. The exploitation of this issue may allow a remote attacker to cause a denial of service.

The issue is a heap-based buffer overflow that occurs via the function `qs parse` in `query string.h`. This allows attackers to remotely execute arbitrary code in the context of the vulnerable service.