CVE-2026-116539

About vulnerability

Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer BIO callback caused by failing to wrap the non-application ring buffer write index. Remote TLS peers can drive handshake, renegotiation, or post-handshake messages into this buffer, triggering an out-of-bounds memcpy that crashes the JVM process.

Affected product:

Netty , Spring , alluxio , applicationinsights-java , arrow , artemis , athenz , aws-sdk-java-v2 , azure-kusto-java , azure-sdk-for-java , azure-search-documents , azure-spring-data-cosmos , bookkeeper , camel , canal , couchbase-jvm-clients , couchbase-jvm-clients-core-io , couchbase-jvm-clients-java-client , curator , debezium , dledger , google-cloud-java , grpc-java , hbase , hbase-thirdparty , ignite , java-logging , micrometer , opencensus-java , org.apache.ratis:ratis-thirdparty-misc , pinecone-java-client , pravega , pulsar , pulsar-client-reactive , ratis , rocketmq , sdk-platform-java , tika , zookeeper

Affected packages:

netty-tcnative @ 2.0.29.Final (+12523 more)