red-hatCVE-2026-93494

A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending a specially crafted STOMP frame body without its terminating null byte.

High7.5CVE-2026-93494 · Published Sep 18, 2026 · updated Sep 25, 2026

Affected versions

Package	Affected	Fixed in
Red Hat Fuse 7 Vendor	all versions	No fix yet
Red Hat JBoss Enterprise Application Platform 7 Vendor	all versions	No fix yet
	all versions	No fix yet
	all versions	No fix yet
	all versions	No fix yet
Red Hat Single Sign-On 7 Vendor	all versions	No fix yet
Red Hat build of Apache Camel for Spring Boot 4 Vendor	all versions	No fix yet

Details and references

A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending a specially crafted STOMP frame body without its terminating null byte. This causes the decoder to allocate a ByteBuf (a buffer for bytes) that is never released, leading to a permanent memory leak. Over time, this uncontrolled memory consumption can result in a Denial of Service (DoS) for the application using the affected STOMP codec.

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from: no source yet
Weakness: CWE-1035

More red-hat advisories

All

Date	Advisory	Severity	Fixed in
Sep 17	A flaw was found in Keycloak. When deployed in stateless mode with MySQL or MariaDB, a mismatch in row-count semantics between the database driver and Keycloak's application logic allows an attacker... CVE-2026-90997High7.4fixed in Keycloak 26.7.4	High7.4	Keycloak 26.7.4
Sep 17	A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. CVE-2026-76781Medium5.5no fix yet	Medium5.5	No fix yet
Sep 18	A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with... CVE-2026-89058High7.4fixed in Red Hat, Inc.: CVE records (CNA) 6.2.19.Final, Red Hat, Inc.: CVE records (CNA) 7.0.5.Final	High7.4	Red Hat, Inc.: CVE records (CNA) 6.2.19.Final, Red Hat, Inc.: CVE records (CNA) 7.0.5.Final
Sep 18	A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. CVE-2026-89059High7.5fixed in Red Hat, Inc.: CVE records (CNA) 6.2.19.Final, Red Hat, Inc.: CVE records (CNA) 7.0.5.Final	High7.5	Red Hat, Inc.: CVE records (CNA) 6.2.19.Final, Red Hat, Inc.: CVE records (CNA) 7.0.5.Final
Sep 18	A flaw was found in Netty's `netty-handler-ssl-ocsp` component. CVE-2026-93493Medium5.9no fix yet	Medium5.9	No fix yet
Sep 17	A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by streaming messages over a single connection faster than the application... CVE-2026-87742High7.5no fix yet	High7.5	No fix yet

Affected versions

More red-hat advisories

Critical advisories by email