Skip to content
Threat Feed
Subscribe

Product

Netty-Codec-Http (>= 4.2.0.Final, <= 4.2.15.Final)

1 brief RSS
medium advisory

Netty SPDY SETTINGS Frame Denial of Service Vulnerability

A high-severity vulnerability, CVE-2026-55831, in Netty's SPDY SETTINGS decoder allows a remote unauthenticated attacker to trigger a denial of service by sending a crafted SPDY/3.1 SETTINGS frame that leads to excessive heap growth and CPU consumption due to unbounded map entries in `DefaultSpdySettingsFrame`.

netty-codec-http +3 denial-of-service vulnerability netty spdy java memory-leak DoS
3t 1c 1i