HAProxy: Unauthorized memory reading through H3/QPACK Huffman vulnerability

A flaw in HAProxy's Huffman compression processing for the H3/QPACK protocol allows attackers to force memory reads at unexpected addresses.

Published 9sem1 sourceImportant

≈ 23sSpeed

The fact

This vulnerability potentially exposes sensitive data stored in the memory of servers using HAProxy as a reverse proxy.

The flaw affects high-performance infrastructures that rely on HAProxy for load balancing.

Explore this topic

Cross-sources — 1 source

Auto-synthesis from 1 media source · identified on May 10, 2026