CVE-2026-42587 · Brief

CVEs like CVE-2026-42587

The records whose text reads closest to CVE-2026-42587, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2020-116120.798
   The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte…

   Related weakness classes, CWE-400 is above CWE-770; same vendor or product family, netty.

2. CVE-2019-204450.680
   HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second…

   Same vendor or product family, netty.

3. CVE-2026-1006600.695
   Netty before 4.2.18.Final QpackEncoder Unbounded Memory Retention

   Related weakness classes, CWE-400 is above CWE-770; same vendor or product family, netty.

4. CVE-2026-454160.681
   Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

   Related weakness classes, CWE-400 is above CWE-770; same vendor or product family, netty.

5. CVE-2025-580570.838
   Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

   Related weakness classes, CWE-400 is above CWE-409; same vendor or product family, netty.

6. CVE-2026-598990.712
   Netty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service

   Related weakness classes, CWE-400 is above CWE-770; same vendor or product family, netty.

7. CVE-2026-472440.682
   Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced

   Same weakness class, CWE-400 (uncontrolled resource consumption); same vendor or product family, netty.

8. CVE-2026-599010.679
   Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

   Same vendor or product family, netty.

9. CVE-2026-558510.725
   Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion

   Same weakness class, CWE-400 (uncontrolled resource consumption); same vendor or product family, netty.

10. CVE-2026-480430.771
    netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

    Same weakness class, CWE-400 (uncontrolled resource consumption); same vendor or product family, netty.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.