CVE-2026-47207— Envoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| envoyproxy | envoy | >= 1.38.0, < 1.38.3 | affected |
>= 1.37.0, < 1.37.5 | affected | ||
>= 1.36.0, < 1.36.9 | affected | ||
>= 1.34.0, < 1.35.13 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-47207
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Envoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message
Source: CVE Program / CVE List V5
Vulnerability Description
Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy crashes if an ext_proc server sends a single gRPC message containing multiple, specially crafted ProcessingResponse messages. This can occur when the first response in the batch causes the gRPC stream object to be destroyed, leading to a use-after-free error when Envoy attempts to process subsequent responses in the same gRPC message. This vulnerability is fixed in 1.35.13, 1.36.9, 1.37.5, and 1.38.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5
Vulnerability Title
Envoy Proxy Envoy 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Envoy Proxy Envoy是Envoy Proxy团队的应用网关。 Envoy Proxy Envoy存在资源管理错误漏洞，该漏洞源于在ext_proc服务器发送包含多个特制ProcessingResponse消息的单个gRPC消息时，批量处理中第一个响应导致gRPC流对象被销毁，进而在后续响应处理中触发释放后重用错误，可能导致Envoy崩溃。以下版本受到影响：1.35.13之前版本的1.34.x版本、1.36.9之前版本的1.36.x版本、1.37.5之前版本的1.37.x版本和1.38.3之前
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| envoyproxy | envoy | >= 1.38.0, < 1.38.3 | - |
II. Public POCs for CVE-2026-47207
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-47207
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-47207 (1)
Same Patch Batch · envoyproxy · 2026-06-26 · 14 CVEs total
| CVE-2026-48743 | 7.5 HIGH | Envoy: HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Le |
| CVE-2026-48042 | 7.5 HIGH | Envoy: Stack overflow in destructor of highly nested JSON |
| CVE-2026-48044 | 7.5 HIGH | Envoy Zstd Decompressor: Ratio Check at Wrong Loop Depth lead to memory explosion |
| CVE-2026-47220 | 7.5 HIGH | Envoy: Segmentation fault when using %REQUESTED_SERVER_NAME% in log format |
| CVE-2026-47775 | 6.8 MEDIUM | Envoy OAuth2 Filter: Padding Oracle via AES-256-CBC Cookie Decryption |
| CVE-2026-47204 | 6.5 MEDIUM | Envoy: grpc_stats filter segfault on Connect protocol requests to direct_response routes |
| CVE-2026-47221 | 5.9 MEDIUM | Envoy: Null pointer deref in internal redirects |
| CVE-2026-48497 | 5.9 MEDIUM | Envoy: Abnormal process termination in DNS UDP filter |
| CVE-2026-48706 | 5.9 MEDIUM | Envoy Heap Buffer Overflow in TcpStatsdSink |
| CVE-2026-47205 | 5.9 MEDIUM | Envoy: ext_authz Use-After-Free during Stream Teardown with Per-Route Overrides |
| CVE-2026-48090 | 5.9 MEDIUM | Envoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash r |
| CVE-2026-47692 | 4.8 MEDIUM | Envoy: PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-con |
| CVE-2026-47778 | 4.4 MEDIUM | Envoy: Embedded NUL in TLS DNS SAN Truncation in the Default TLS Certificate Validator. (A |
IV. Related Vulnerabilities
Same product: envoy
- CVE-2026-48090
Envoy HTTP: OAuth2 filter late async token completion after - CVE-2026-47220
Envoy: Segmentation fault when using %REQUESTED_SERVER_NAME% - CVE-2026-47205
Envoy: ext_authz Use-After-Free during Stream Teardown with - CVE-2026-47692
Envoy: PROXY Protocol v2 header generator emits "skipped" TL - CVE-2026-48706
Envoy Heap Buffer Overflow in TcpStatsdSink
Same vendor: envoyproxy
- CVE-2026-48090
Envoy HTTP: OAuth2 filter late async token completion after - CVE-2026-47220
Envoy: Segmentation fault when using %REQUESTED_SERVER_NAME% - CVE-2026-47205
Envoy: ext_authz Use-After-Free during Stream Teardown with - CVE-2026-47692
Envoy: PROXY Protocol v2 header generator emits "skipped" TL - CVE-2026-48706
Envoy Heap Buffer Overflow in TcpStatsdSink
Same weakness: CWE-416
- CVE-2026-49306
time模块UAF漏洞，影响可用性 - CVE-2026-12366
Use-after-free freeing an armed dynamically-allocated k_time - CVE-2026-12365
Use-after-free in Zephyr delayable work-queue cancellation u - CVE-2026-11937
Security vulnerabilities have been found in IBM Verify Ident - CVE-2026-19548
Binutils: binutils: multiple use-after-free in add_archive_e
V. Comments for CVE-2026-47207
No comments yet