CVE-2026-100661 | Netty up to 4.2.17.Final QPACK Decoder QpackUtil.decodePrefixedInteger resource consumption

A vulnerability marked as problematic has been reported in Netty up to 4.2.17.Final. Impacted is the function QpackUtil.decodePrefixedInteger of the component QPACK Decoder. This manipulation causes resource consumption.

This vulnerability is handled as CVE-2026-100661. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More