Advisories · Technology

netty-tcnative-boringssl-static.

Every CVE that names netty-tcnative-boringssl-static among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116542 CVE record

CVSS 6.9 Medium

Netty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decoding
- netty-tcnative
- netty-tcnative-boringssl-static
- CWE-176
Not analysed yet 26 Oct 2026
CVE-2026-116541 CVE record

CVSS 8.2 High

netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount
- netty-tcnative
- netty-tcnative-boringssl-static
- CWE-682
Not analysed yet 26 Oct 2026
CVE-2026-116539 CVE record

CVSS 8.2 High

Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO
- netty-tcnative
- netty-tcnative-boringssl-static
- Memory corruption
Not analysed yet 26 Oct 2026