8.2
High
CVE-2026-116539 Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer…
Description
Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer BIO callback caused by failing to wrap the non-application ring buffer write index. Remote TLS peers can drive handshake, renegotiation, or post-handshake messages into this buffer, triggering an out-of-bounds memcpy that crashes the JVM process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| netty-tcnative 2.0 | earliest → < 2.0.84.Final | 2.0.84.Final |
| netty-tcnative-boringssl-static 2.0 | earliest → < 2.0.84.Final | 2.0.84.Final |
References
- GitHub Security Advisory (GHSA-gf9q-9mg7-g5qh) github.com
- Patch Commit github.com
- github.com github.com
- netty-tcnative netty-tcnative-parent-2.0.84.Final Release Notes github.com
- github.com github.com
- VulnCheck Advisory: Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO www.vulncheck.com
Timeline
- Published
- Last modified
Other CVEs of netty-tcnative
The 4 CVEs of netty-tcnative →
CVE-2026-116542
Netty netty-tcnative before 2.0.84.Final contains an SNI hostname spoofing vulnerability that allows remote…
6.9
Medium
CVE-2026-116541
Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write_to_bytebuffer BIO…
8.2
High
CVE-2026-116540
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in…
8.2
High