Apache HTTP Server mod_http2 heap bug can yield RCE (CVE-2026-119618)
The advisory rates the assign_headers race critical and also covers mod_h2 2.0.8 through 2.0.42.
Stories per day · 30 days
4 stories, newest first · one card per story
Stories tagged #heap-corruption
USN-8827-1: Erlang vulnerabilities
Ubuntu's USN-8827-1 addresses Erlang bugs that can crash the port mapper or runtime.
Exim Mail Server 4.100.1 Fixes 4 Security Flaws Including SMTP Smuggling and Heap Corruption
Exim 4.100.1 patches four flaws, including high-severity Proxy Protocol heap corruption, uninitialized data leak, GnuTLS use-after-free, and SMTP smuggling.
Exim Mail Server Hit by 4 Security Flaws Enabling SMTP Smuggling and Heap Corruption
Exim Mail Server 4.100.1 patches critical out-of-bounds write and SMTP smuggling flaws that could allow remote code execution and message injection.
1