Launchpad.net

CVE 2019-10082

In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.

See the CVE page on Mitre.org for more details.