Hongliuliao develops ehttp, a narrowly scoped web server component where the observed vulnerability pattern centers on memory-safety issues including out-of-bounds reads and use-after-free conditions. Current severity, exploitation status, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Hongliuliao over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-52267HIGH ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings. | Dec 31, 2023 | 7.5 | 21 | NO | NO |
CVE-2023-52266HIGH ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over a short time to trigger this. | Dec 31, 2023 | 7.5 | 21 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Hongliuliao.
Media articles that mention a CVE ID that affects a product developed by Hongliuliao — matched by CVE ID, not by vendor name.