Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-48913

Apache HTTP Server: mod_http2 memory corruption when file handles exhausted

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache HTTP Server

Default version status: unaffected

  • 2.4.55 to ≤ 2.4.67affected

References