CVE-2026-100657 | Netty prior 4.1.138.Final/4.2.18.Final StompSubframeDecoder memory allocation

September 26, 2026 Yanac

A vulnerability labeled as problematic has been found in Netty. This issue affects some unknown processing of the component StompSubframeDecoder. The manipulation results in uncontrolled memory allocation.

This vulnerability is known as CVE-2026-100657. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More