PT-2026-25068

CVE-2026-32239

Publicado

2026-03-12

Atualizado

2026-08-19

Descrição por

CVSS 3.1

6.5

Média

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cap'n Proto versions prior to 1.4.0

Description Cap'n Proto is a data interchange format and capability-based RPC system. Prior to version 1.4.0, a negative Content-Length value was converted to unsigned, resulting in it being treated as an impossibly large length. This could potentially enable HTTP request/response smuggling. The issue is related to integer overflow in KJ-HTTP.

Recommendations Update to Cap'n Proto version 1.4.0 or later.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-444: Inconsistent Interpretation of HTTP Requests (\'HTTP Request/Response Smuggling\')

CWE-190: Integer Overflow or Wraparound

Identificadores relacionados