← العودة للجدول
CVE-2026-46340
CVE-2026-46340 — Netty is a network application framework for development of protocol servers and
📅 2026-06-12
🟠 High 🔥 No NVD Exploit Vulnerability CVSS 7.5

📋 الوصف الكامل

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does `fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBuf))`, wrapping the previous accumulator and the new slice into a *new* CompositeByteBuf every time. After N fragm

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-46340

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v4.1.135

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←