CWE-1035 (CWE-1035) — 3 disclosed vulnerabilities

Records the NVD classes under CWE-1035, highest CVSS first.

HIGH 7.5CVE-2026-935752026-09-18
A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet. The decoder fails to properly validate the 'Properties Length' against the 'Remaining Length', allowi…
AI risk analysis on Exploit-DB.ai →
HIGH 7.5CVE-2026-935632026-09-18
A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP server, could exploit this by sending a specially crafted, unbounded multi-line SMTP response without a terminator. This vuln…
AI risk analysis on Exploit-DB.ai →
MEDIUM 6.5CVE-2026-935612026-09-18
A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads `keyLength` and `extrasLength` as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mis…
AI risk analysis on Exploit-DB.ai →