CVE-2026-116539

Name of the Vulnerable Software and Affected Versions netty-tcnative versions prior to 2.0.84.Final

Description A heap buffer overflow occurs in the tcn write to bytebuffer BIO callback due to a failure to wrap the non-application ring buffer write index. Remote TLS peers can send handshake, renegotiation, or post-handshake messages into this buffer, triggering an out-of-bounds memcpy (a memory copy operation that writes data beyond the allocated buffer boundary), which results in a crash of the JVM process.

Recommendations Update to version 2.0.84.Final or later.