Skip to content
Threat Feed
Subscribe

Product

Netty-Codec-Http2 (4.2.x)

1 brief RSS
low advisory

Netty HTTP/2 Decompressor Direct Memory Leak

A vulnerability in Netty's HTTP/2 decompressor allows an unauthenticated attacker to trigger an uncontrolled memory leak leading to a JVM OutOfMemoryError via crafted HTTP/2 DATA frames.

netty-codec-http2 +1 denial-of-service memory-leak netty cve-2026-56819
1c