HAProxy: Unauthorized memory reading through H3/QPACK Huffman vulnerability

A flaw in HAProxy's Huffman compression processing for the H3/QPACK protocol allows attackers to force memory reads at unexpected addresses.

Published 16sem1 sourceImportant

≈ 23sSpeed

The fact

This vulnerability potentially exposes sensitive data stored in the memory of servers using HAProxy as a reverse proxy.

The flaw affects high-performance infrastructures that rely on HAProxy for load balancing.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on May 10, 2026