CVE-2021-36154

—

CVSS 3.1

7.5 high

EPSS

2%p80

Published

Jul 9, 2021 (Jul 9, 2021)

Modified

Jun 17, 2026

Description

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption.

Vendors: linuxfoundation
Products: grpc swift
Weakness: CWE-674
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.