CVE-2026-41207: CWE-330: Use of Insufficiently Random Values in netty netty-incubator-codec-ohttp
The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand returns non-NULL on failure. The byte[] is filled with zeros and has no way to distinguish success from failure. Since this output is used as HKDF key material for the response AEAD, a failure silently produces an all-zero key. When EVP_HPKE_CTX_export fails it also returns an empty byte[] array filled with zeros. This byte[] feeds directly into OHttpCrypto.createResponseAEAD(...). A silent all-zero export secret would produce a deterministic, attacker-predictable AEAD key. Version 0.0.21.Final patches the issue.
AI Analysis
Technical Summary
The vulnerability arises from the HKDF_expand function in netty-incubator-codec-ohttp versions before 0.0.21.Final returning a zero-filled byte array on failure instead of signaling an error. This zero-filled output is used as key material for the response AEAD encryption, causing the generation of a deterministic and attacker-predictable AEAD key. Similarly, EVP_HPKE_CTX_export failure returns a zero-filled byte array that feeds into OHttpCrypto.createResponseAEAD(...). This insufficient randomness in key generation violates cryptographic best practices (CWE-330). The issue is fixed in version 0.0.21.Final.
Potential Impact
The vulnerability causes cryptographic keys used for response AEAD encryption to be deterministic and predictable due to zero-filled key material on failure. This undermines the confidentiality guarantees of the encryption, potentially allowing attackers to decrypt or forge encrypted responses if they can induce or exploit the failure condition. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality and integrity impact.
Mitigation Recommendations
A fix is available in netty-incubator-codec-ohttp version 0.0.21.Final. Users should upgrade to this version or later to resolve the issue. No other mitigation guidance is provided or required as the vulnerability is addressed by the official patch.
CVE-2026-41207: CWE-330: Use of Insufficiently Random Values in netty netty-incubator-codec-ohttp
Description
The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand returns non-NULL on failure. The byte[] is filled with zeros and has no way to distinguish success from failure. Since this output is used as HKDF key material for the response AEAD, a failure silently produces an all-zero key. When EVP_HPKE_CTX_export fails it also returns an empty byte[] array filled with zeros. This byte[] feeds directly into OHttpCrypto.createResponseAEAD(...). A silent all-zero export secret would produce a deterministic, attacker-predictable AEAD key. Version 0.0.21.Final patches the issue.
CVSS v4.0
Score 6.9medium
Affected software
pkg:maven/io.netty/netty-incubator-codec-ohttpRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability arises from the HKDF_expand function in netty-incubator-codec-ohttp versions before 0.0.21.Final returning a zero-filled byte array on failure instead of signaling an error. This zero-filled output is used as key material for the response AEAD encryption, causing the generation of a deterministic and attacker-predictable AEAD key. Similarly, EVP_HPKE_CTX_export failure returns a zero-filled byte array that feeds into OHttpCrypto.createResponseAEAD(...). This insufficient randomness in key generation violates cryptographic best practices (CWE-330). The issue is fixed in version 0.0.21.Final.
Potential Impact
The vulnerability causes cryptographic keys used for response AEAD encryption to be deterministic and predictable due to zero-filled key material on failure. This undermines the confidentiality guarantees of the encryption, potentially allowing attackers to decrypt or forge encrypted responses if they can induce or exploit the failure condition. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality and integrity impact.
Mitigation Recommendations
A fix is available in netty-incubator-codec-ohttp version 0.0.21.Final. Users should upgrade to this version or later to resolve the issue. No other mitigation guidance is provided or required as the vulnerability is addressed by the official patch.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-04-18T02:51:52.974Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a21ba77e29bf47b50be41ff
Added to database: 06/04/2026, 17:48:39 UTC
Last enriched: 06/12/2026, 10:01:21 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 107
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.