A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated… (CVE-2026-114459)

CVE-2026-114459 describes a flaw in the mod_qos module where improper boundary checking during inspection of HTTP response bodies can cause out-of-bounds memory reads. An unauthenticated attacker can trigger this by crafting specific server responses, resulting in a crash of an Apache worker process and causing denial of service.

The vulnerability can be exploited remotely without authentication to cause a denial of service by crashing Apache worker processes. There is no impact on confidentiality or integrity, only availability is affected.

No patch or official fix information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting exposure of the affected service or applying workarounds if provided by the vendor.