Product
Apache HTTP Server versions 2.4.55 through 2.4.70 contain a heap corruption vulnerability in the mod_http2 module that may allow remote code execution due to improper synchronization during header assignment.