Hebi

The issue is related to HTTP applications based on Crow, which may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB. This could allow a remote attacker to gain unauthorized access to protected information. The vulnerability is associated with a lack of protection for service data.

The issue is related to HTTP applications based on Crow, where the use of HTTP pipelining can lead to a Use-After-Free condition, potentially allowing code execution. This occurs because the asynchronous Connection layer is unaware of HTTP pipelining, specifically that it has begun processing a later request before finishing an earlier one. The vulnerability can be exploited by a remote attacker to execute arbitrary code.