CWE-1035 · Other weaknesses
CWE-1035
13CVEs
SortMost likely exploited
13 CVEs with CWE-1035 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-93558Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of serviceRed Hat · Red Hat Build of Apache Camel 3.33.3.SP2 · CVSS 7.5 · 2026-09-18 | 7.5 | 1.2% | 2026-09-18 |
| CVE-2026-93579Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)Red Hat · Red Hat Build of Debezium 3.6 · CVSS 6.5 · 2026-09-18 | 6.5 | 1.1% | 2026-09-18 |
| CVE-2026-93564Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)Red Hat · Red Hat Build of Apache Camel 3.33.3.SP2 · CVSS 7.5 · 2026-09-18 | 7.5 | 1.1% | 2026-09-18 |
| CVE-2026-93565Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byteRed Hat · Red Hat Build of Apache Camel 3.33.3.SP2 · CVSS 7.5 · 2026-09-18 | 7.5 | 0.9% | 2026-09-18 |
| CVE-2026-93566Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size lineRed Hat · Red Hat Build of Debezium 3.6 · CVSS 6.5 · 2026-09-18 | 6.5 | 0.6% | 2026-09-18 |
| CVE-2026-93562Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smugglingRed Hat · Red Hat Build of Debezium 3.6 · CVSS 6.5 · 2026-09-18 | 6.5 | 0.5% | 2026-09-18 |
| CVE-2026-93492Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table sizeRed Hat · Red Hat Build of Debezium 3.6 · CVSS 5.3 · 2026-09-18 | 5.3 | 0.5% | 2026-09-18 |
| CVE-2026-93560Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dosRed Hat · Red Hat build of Apache Camel for Spring Boot 4 · CVSS 7.5 · 2026-09-18 | 7.5 | 0.4% | 2026-09-18 |
| CVE-2026-93494Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminatedRed Hat · Red Hat build of Apache Camel for Spring Boot 4 · CVSS 7.5 · 2026-09-18 | 7.5 | 0.4% | 2026-09-18 |
| CVE-2026-93575Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoderRed Hat · Red Hat AMQ Broker 7 · CVSS 7.5 · 2026-09-18 | 7.5 | 0.4% | 2026-09-18 |
| CVE-2026-93563Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dosRed Hat · Red Hat build of Apache Camel for Spring Boot 4 · CVSS 7.5 · 2026-09-18 | 7.5 | 0.3% | 2026-09-18 |
| CVE-2026-93578Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypassRed Hat · Red Hat build of Apache Camel for Spring Boot 4 · CVSS 5.9 · 2026-09-18 | 5.9 | 0.2% | 2026-09-18 |
| CVE-2026-93561Io.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smugglingRed Hat · Red Hat build of Apache Camel for Spring Boot 4 · CVSS 6.5 · 2026-09-18 | 6.5 | 0.2% | 2026-09-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.