CVE-2026-102466

Name of the Vulnerable Software and Affected Versions Eclipse Vert.x versions 4.0.0 through 4.5.34 Eclipse Vert.x versions 5.0.0 through 5.0.12 Eclipse Vert.x versions 5.1.0 through 5.1.9 Eclipse Vert.x version 5.2.0

Description The vertx-mysql-client component pre-allocates an array for column definitions based on a column count declared by the server without performing upper-bound validation. A compromised MySQL server or a man-in-the-middle attacker can send a crafted result set packet containing an excessively large column count. This forces the client to attempt a massive heap allocation, leading to an OutOfMemoryError that crashes the Netty event loop thread, resulting in a complete denial of service for all connections and verticles within the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.