← Database

CVE-2026-42580

MEDIUM CVSS: 6.5 Published: 2026-05-13 Modified: 2026-06-17

Description

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently overflows int, enabling request smuggling attacks. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.

Affected Platforms

Netty Netty

Weakness Type

CWE-190, CWE-444

References