{"id":"CVE-2026-116541","aliases":[],"cve":{"records":[{"id":"CVE-2026-116541","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-26T14:30:58.066Z","published":"2026-10-26T14:59:40.847Z","modified":"2026-10-26T19:48:35.492Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-10-26T14:59:40.847Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-26T19:48:35.492Z"}],"references":[{"url":"https://github.com/netty/netty-tcnative/security/advisories/GHSA-9xr3-jwv4-r489","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://github.com/netty/netty-tcnative/commit/e31df4a5885b35085fdfa3e2dca7c1f705d4745b","tags":["patch"],"source":"VulnCheck"},{"url":"https://github.com/netty/netty-tcnative/blob/netty-tcnative-parent-2.0.83.Final/openssl-dynamic/src/main/c/ssl.c#L240","tags":["technical-description"],"source":"VulnCheck"},{"url":"https://github.com/netty/netty-tcnative/releases/tag/netty-tcnative-parent-2.0.84.Final","tags":["release-notes"],"source":"VulnCheck"},{"url":"https://github.com/netty/netty-tcnative","tags":["product"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/netty-tcnative-before-2.0.84-final-denial-of-service-via-bio-write-overcount","tags":["third-party-advisory"],"source":"VulnCheck"}],"weaknesses":[{"id":"CWE-682","description":"Incorrect Calculation","source":"VulnCheck"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-26T19:30:21.899747Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write_to_bytebuffer BIO write callback that overreports bytes consumed. Remote TLS 1.3 peers can provoke queued post-handshake records like NewSessionTicket or KeyUpdate to truncate flights, fail connections, or abort the JVM process.","score":8.2,"severity":"high","published":"2026-10-26T14:59:40.847Z","modified":"2026-10-26T19:48:35.492Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"netty","name":"netty-tcnative","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.0.84.Final","versionType":"custom"}],"defaultStatus":"unaffected","packageURL":"pkg:maven/io.netty/netty-tcnative","packageIdentity":{"ecosystem":"Maven","name":"io.netty:netty-tcnative"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-116541"},{"vendor":"netty","name":"netty-tcnative-boringssl-static","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.0.84.Final","versionType":"custom"}],"defaultStatus":"unaffected","packageURL":"pkg:maven/io.netty/netty-tcnative-boringssl-static","packageIdentity":{"ecosystem":"Maven","name":"io.netty:netty-tcnative-boringssl-static"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-116541"}],"remediation":[],"references":["https://github.com/netty/netty-tcnative/security/advisories/GHSA-9xr3-jwv4-r489","https://github.com/netty/netty-tcnative/commit/e31df4a5885b35085fdfa3e2dca7c1f705d4745b","https://github.com/netty/netty-tcnative/blob/netty-tcnative-parent-2.0.83.Final/openssl-dynamic/src/main/c/ssl.c#L240","https://github.com/netty/netty-tcnative/releases/tag/netty-tcnative-parent-2.0.84.Final","https://github.com/netty/netty-tcnative","https://www.vulncheck.com/advisories/netty-tcnative-before-2.0.84-final-denial-of-service-via-bio-write-overcount"],"sources":[{"name":"CVE","id":"CVE-2026-116541","modified":"2026-10-26T19:48:35.492Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-116541"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","score":8.2},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","score":5.9}],"sourceAffected":[],"observedAt":"2026-10-29T14:35:11.380Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T16:40:31.722Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"Netty netty-tcnative before 2.0.84.Final has a denial of service vulnerability due to incorrect byte count in the BIO write callback. Remote TLS 1.3 peers can cause connection issues or JVM process abortion. The vulnerability is caused by an incorrect calculation.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T08:57:12.001Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-116541"}]}}