EUVD-2026-82870

A flaw was found in Netty's RedisArrayAggregator component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis RESP array headers. This can cause the RedisArrayAggregator to eagerly preallocate a large amount of heap memory, leading to heap memory exhaustio...

PT-2026-95356

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the RedisArrayAggregator component of Netty. A remote attacker can cause heap memory exhaustion and a Denial of Service DoS by sending specially crafted nested Redis RESP array...

CVE-2026-56818

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear the same state when the sibling...