THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-45416 (HIGH 7.5) — Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first record, eagerly all

[NVD] CVE-2026-45416 (HIGH 7.5) — Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first record, eagerly all

lownvdPublished 2026-06-12

CVE-2026-45416 CVSS: 7.5 HIGH Published: 2026-06-12T15:16:26.940

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first record, eagerly allocates `ctx.alloc().buffer(handshakeLength)` (line 161

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-45416