CVE-2026-73513

A flaw was found in Envoy. A malicious upstream server can cause a Denial of Service DoS by sending HTTP/2 response trailers that lack the end-of-stream flag to a proxy configured with the optional oghttp2 codec. This malformed response corrupts the stream state and causes a use-after-free memory...