Skip to content

Known vulnerabilities in Google gRPC

Is your version affected?

CVE Summary Score Published
CVE-2024-7246 It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the… 6.3 Medium Aug 6, 2024
CVE-2023-4785 Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex 7.5 High Sep 13, 2023
CVE-2023-33953 gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between… 7.5 High Aug 9, 2023
CVE-2023-32731 When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame 7.4 High Jun 9, 2023
CVE-2023-32732 gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC… 5.3 Medium Jun 9, 2023
CVE-2023-1428 There exists an vulnerability causing an abort() to be called in gRPC.  The following headers cause gRPC's C++… 7.5 High Jun 9, 2023

Other Google products