← العودة للجدول
CVE-2026-50011
CVE-2026-50011 — Netty is a network application framework for development of protocol servers and
📅 2026-06-12
🟠 High 🔥 No NVD Exploit Vulnerability CVSS 7.5

📋 الوصف الكامل

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, RedisArrayAggregator pre-allocates ArrayList with initial capacity equal to the RESP array element count declared in an array header. That count is taken from the wire before the corresponding child messages exist. A small malicious header can claim a huge ini

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-50011

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v4.1.135

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←