ngtcp2
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ngtcp2 | 2 | – | Apr 16, 2026 |
Exploited and recent CVEs
- CVE-2026-40170 ngtcp2 has a qlog transport parameter serialization stack buffer overflow 0.8%
- CVE-2024-52811 Acks not validated before logged to qlog leads to buffer overflow in ngtcp2 0.8%