CVE-2021-32714

CVE-2021-32714 is a critical integer overflow vulnerability affecting hyper, an HTTP library for Rust, in versions prior to 0.14.10. This flaw occurs when decoding excessively large chunk sizes, potentially leading to data loss or, when combined with an upstream proxy, enabling request smuggling or desync attacks. With a CVSS score of 9.1 (CRITICAL), it can be exploited remotely without authentication or user interaction, resulting in high impact to integrity and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.