CVE-2025-53020

CVE-2025-53020: Apache HTTP Server: HTTP/2 DoS by Memory Increase

Vendor Apache Software Foundation

Product Apache HTTP Server

Weakness CWE-401

Published July 10, 2025

Last update November 4, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

Description

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes the issue.

Key dates

Disclosure timeline

July 10, 2025 CVE published

November 4, 2025 Record updated