The vulnerability CVE-2025-24970 affects the io.netty/netty-handler library used in Red Hat Integration Camel K 1.10.10. Specifically, the SslHandler component fails to properly validate SSL packets, which can lead to a native crash when the native SSLEngine is in use. This issue is classified under CWE-20 (Improper Input Validation). Red Hat has released Camel K 1.10.10 as a security update to address this flaw. The advisory does not provide a CVSS score but rates the impact as important (high severity). No known exploits in the wild have been reported at the time of the advisory.

The vulnerability can cause a native crash in applications using the affected version of Camel K with the native SSLEngine, potentially leading to denial of service or instability in affected systems. There is no indication of remote code execution or data breach from the provided information. The impact is primarily on stability and availability of the affected component.

Red Hat has released Camel K version 1.10.10 which includes the fix for this vulnerability. Users should apply this update to remediate the issue. Before applying the update, ensure all previously released relevant errata are installed. Detailed update instructions are available from Red Hat's official documentation. No additional mitigation steps are indicated by the vendor advisory.