Dejan Alvadzijevic

The issue is related to the improper parsing of a multipart/form-data boundary in the MHD create post processor() method. This can be exploited by an attacker to send a malicious HTTP POST packet, potentially resulting in an out-of-bounds read and a crash in the find boundary() function. The exploitation of this issue may allow a remote attacker to cause a denial of service.

O problema consiste em um estouro de buffer baseado na pilha que ocorre por meio da função `qs parse` no arquivo `query string.h`. Isso permite que invasores executem remotamente código arbitrário no contexto do serviço vulnerável.