CVE-2026-73508Published
Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-73508 · Microsoft / collected KEV context
cve-program · CVE-2026-73508
- https://github.com/netty/netty/security/advisories/GHSA-mfg7-5gfp-c4w3
- https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b
- https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6
- https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
- https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
Related operational evidence
Explicit CVE identifiers- Confluence Data Center: DoS (Denial of Service) io.netty:netty-codec-dns Dependency (CVE-2026-73508) · Security advisory · 20 Oct 2026