CVE-2026-64785: Inconsistent Interpretation of HTTP Requests

SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 codec, enabling HTTP request smuggling or response splitting. This vulnerability is addressed in swift-nio-http2...

envoy:codec_impl_fuzz_test: Bad-cast to Envoy::Http::Http1::ConnectionImplEnvoy::Http::Http1::StreamEncoderImpl::readDisable in Envoy::Http::Http1::StreamEncoderImpl::~StreamEncoderImpl

Detailed Report: https://oss-fuzz.com/testcase?key=5694284302516224 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000006e40fb8 Crash State: Bad-cast to...