FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

mod_http2 -- heap corruption and RCE in assign_headers

Affected packages
ap24-mod_http2 < 2.0.43

Details

VuXML ID 52ed373b-df37-11f1-8135-8447094a420f
Discovery 2026-11-11
Entry 2026-11-13

The Apache httpd project reports:

CVE-2026-119618 (critical): mod_http2: heap corruption and RCE in assign_headers

[source]

References

CVE Name CVE-2026-119618
URL https://httpd.apache.org/security/vulnerabilities_24.html

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.