Description

Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.

INFO

Published Date :

2026-03-12T19:35:57.374Z

Last Modified :

2026-03-13T16:14:32.323Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2026-32240 vulnerability.

Vendors Products
Capnproto
  • Capnproto
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-32240.

URL Resource
https://capnproto.org/capnproto-c++-1.4.0.tar.gz cve-icon cve-icon cve-icon
https://capnproto.org/capnproto-c++-win32-1.4.0.zip cve-icon cve-icon cve-icon
https://github.com/capnproto/capnproto/commit/2744b3c012b4aa3c31cefb61ec656829fa5c0e36 cve-icon cve-icon cve-icon
https://github.com/capnproto/capnproto/commit/e929f0ba7901a6b8f4b5ba9a4db00af43288cbb0 cve-icon cve-icon cve-icon
https://github.com/capnproto/capnproto/security/advisories/GHSA-vpcq-mx5v-32wm cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-32240 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-32240 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact