CVE-2023-32731

CVE-2023-32731 is a high-severity vulnerability affecting gRPC HTTP2 stack, where an error in header size processing can desynchronize HPACK tables between a sender and receiver. This desynchronization could lead to information leaks, potentially enabling privilege escalation or data exfiltration, especially when a proxy is involved. With a CVSS score of 7.5, it is a network-exploitable vulnerability with low attack complexity and high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.