CVE-2026-35469

Aliases:GHSA-pc3f-x583-g7j2GO-2026-4958SUSE-SU-2026:3504-1RHSA-2026:34755RHSA-2026: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
Advisory lineage Upstream: 0 Downstream: 30
Deferred
Published: 16 Apr 2026, 21:19
Last modified:11 Sept 2026, 12:09

Vulnerability Summary

Overall Risk (default)
medium
35/100
CVSS Score
8.7 HIGH
v4.0 (cve.org)
EPSS Score
0.66% LOW
1% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Apr 2026, 21:19
Published
Vulnerability first disclosed
11 Sept 2026, 12:09
Last Modified
Vulnerability information updated

Description

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes — all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.

CVSS Metrics

  • v4.0•HIGH•Score: 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • v4.0•HIGH•Score: 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.66%• Percentile: 50%

Techniques & Countermeasures

  • CWE-770•Allocation of Resources Without Limits or Throttling

    The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Affected Systems

  • chainguard•argo-cd-2.14

    all

  • chainguard•argo-cd-2.14-compat

    all

  • chainguard•argo-cd-3.0

    all

  • chainguard•argo-cd-3.0-compat

    all

  • chainguard•argo-cd-3.1

    < 3.1.15-r0

  • chainguard•argo-cd-3.1-compat

    < 3.1.15-r0

  • chainguard•argo-cd-3.2

    < 3.2.10-r0 | < 3.2.8-r5

  • chainguard•argo-cd-3.2-compat

    < 3.2.10-r0

  • chainguard•argo-cd-3.3

    < 3.3.7-r1

  • chainguard•argo-cd-3.3-compat

    < 3.3.7-r1

  • chainguard•argo-cd-fips-2.14

    all

  • chainguard•argo-cd-fips-2.14-compat

    all

  • chainguard•argo-cd-fips-3.0

    all

  • chainguard•argo-cd-fips-3.0-compat

    all

  • chainguard•argo-cd-fips-3.1

    < 3.1.13-r5

  • chainguard•argo-cd-fips-3.1-compat

    < 3.1.13-r5

  • chainguard•argo-cd-fips-3.2

    < 3.2.8-r5

  • chainguard•argo-cd-fips-3.2-compat

    < 3.2.8-r5

  • chainguard•argo-cd-fips-3.3

    < 3.3.8-r1

  • chainguard•argo-cd-fips-3.3-compat

    < 3.3.8-r1

  • chainguard•argo-rollouts

    < 1.9.0-r8

  • chainguard•argo-rollouts-fips

    < 1.9.0-r4

  • chainguard•argo-workflow-controller-3.6

    < 3.6.19-r6

  • chainguard•argo-workflow-controller-3.7

    < 3.7.13-r2

  • chainguard•argo-workflow-controller-4.0

    < 4.0.4-r5

  • chainguard•argo-workflow-controller-fips-3.6

    < 3.6.19-r7

  • chainguard•argo-workflow-controller-fips-3.7

    < 3.7.13-r6

  • chainguard•argo-workflow-controller-fips-4.0

    < 4.0.4-r6

  • chainguard•argo-workflow-executor-3.6

    < 3.6.19-r6

  • chainguard•argo-workflow-executor-3.7

    < 3.7.13-r2

  • chainguard•argo-workflow-executor-4.0

    < 4.0.4-r5

  • chainguard•argo-workflow-executor-fips-3.6

    < 3.6.19-r7

  • chainguard•argo-workflow-executor-fips-3.7

    < 3.7.13-r6

  • chainguard•argo-workflow-executor-fips-4.0

    < 4.0.4-r6

  • chainguard•argo-workflows-3.6

    < 3.6.19-r6

  • chainguard•argo-workflows-3.7

    < 3.7.13-r2

  • chainguard•argo-workflows-4.0

    < 4.0.4-r5

  • chainguard•argo-workflows-fips-3.6

    < 3.6.19-r7

  • chainguard•argo-workflows-fips-3.7

    < 3.7.13-r6

  • chainguard•argo-workflows-fips-4.0

    < 4.0.4-r6

  • chainguard•argocd-image-updater

    < 1.1.1-r9

  • chainguard•argocd-image-updater-fips

    < 1.1.1-r10

  • chainguard•aws-node-termination-handler

    < 1.25.6-r5

  • chainguard•aws-node-termination-handler-fips

    < 1.25.6-r2

  • chainguard•cert-manager-istio-csr

    < 0.16.0-r5

  • chainguard•cert-manager-istio-csr-fips

    < 0.16.0-r5

  • chainguard•cilium-1.17

    < 1.17.15-r1

  • chainguard•cilium-1.17-clustermesh-apiserver

    < 1.17.15-r1

  • chainguard•cilium-1.17-operator-aws

    < 1.17.15-r1

  • chainguard•cilium-1.17-operator-generic

    < 1.17.15-r1

Showing first 50 affected entries in server-rendered view.

References (101)