CVE-2026-44967: opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response

Overview

Severity
Medium (CVSS 5.3)
CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploit Status
Not Exploited
Patch Tuesday
2026-Jun
Released
2026-06-14
Last Updated
2026-07-01
EPSS Score
0.21% (percentile: 10.9%)

Affected Products (3)

Other

  • 20730-17084
  • 21451-17084
  • 21522-17084

Revision History

  • 2026-06-14: Information published.
  • 2026-06-15: Information published.
  • 2026-06-19: Information published.
  • 2026-06-20: Information published.
  • 2026-06-23: Information published.
  • 2026-06-30: Information published.
  • 2026-07-01: Information published.