CVE-2026-75596

Netty is an asynchronous, event-driven network application framework.

Netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.ssl.SniHandler constructors use the pre-handshake ClientHello aggregation path in handler/src/main/java/io/netty/handler/ssl/SslClientHelloHandler.java at io.netty.handler.ssl.SslClientHelloHandler#decode, where handshakeBuffer.clear() and writeBytes() recopy all previously received body bytes for every additional TLS record. An…

19. Aug 2026

Ausgewertete Quellen

• NVD
  CVE-2026-75596
• GitHub
  https://github.com/netty/netty/security/advisories/GHSA-fccg-mwvh-qqg4