An out-of-bounds read vulnerability exists in the mod_proxy_ajp module of Apache HTTP Server versions through 2.4.66. This flaw allows an attacker to read memory outside the intended buffer boundaries, potentially exposing sensitive information. The issue is fixed in Apache HTTP Server version 2.4.67, and users are advised to upgrade to this version to mitigate the vulnerability.