CVE-2026-48521

A flaw was found in Envoy. A remote attacker can cause a Denial of Service DoS when HTTP/3 and automatic protocol selection are enabled. The proxy attempts to access transport socket options during connection pool selection without verifying that they exist, causing an unexpected process crash wh...