Search: CVE-2026-45416

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.9%	CVE-2026-45416Netty · Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello High7.5EPSS 0.9%2026-06-12GCVE DatabaseCVE-2026-45416 Netty versions prior to 4.1.135.Final and 4.2.15.Final contain a vulnerability in the SslClientHelloHandler.decode() method where the TLS handshake length is read and a large buffer allocation is made without proper length checks or timeout scheduling. This can lead to excessive memory allocation and retention until the channel closes. The issue is patched in versions 4.1.135.Final and 4.2.15.Final. EPSS 0.9%Vulnerability	GCVE Database	2026-06-12

Page 1 of 1