CVE-2026-56816

Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's Http3FrameCodec buffers incoming data for HTTP/3 reserved frame types up to the wire-specified payload length without limits; decodeFrame trusts payLoadLength, allowing an...

trafficserver:fuzz_http3frame: Use-of-uninitialized-value in Http3FrameFactory::create

Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=4793610426449920 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzhttp3frame Job Type: libfuzzermsantrafficserver Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...