Skip to content
Threat Feed
Subscribe

Product

Netty-Codec-Http3 (< 4.2.16.Final)

1 brief RSS
low advisory

Netty HTTP/3 Codec Vulnerability Leads to Denial of Service via Memory Exhaustion

A vulnerability in Netty's HTTP/3 `Http3FrameCodec`, tracked as CVE-2026-56816, allows an unauthenticated remote attacker to cause a denial of service by sending crafted reserved HTTP/3 frames with an excessively large, unvalidated payload length, leading to server memory exhaustion.

netty-codec-http3 denial-of-service vulnerability java netty http3
1t 1c